mirror of
https://github.com/TracksApp/tracks.git
synced 2026-02-05 23:41:48 +01:00
Remove support for deprecated password-hashing algorithm
* Remove all methods implementing and checking for the old algorithm * Document a pre-upgrade step to check for remaining obsolete passwords * Remove config.salt
This commit is contained in:
parent
6caa2de318
commit
ea0d40060a
19 changed files with 17 additions and 164 deletions
|
|
@ -6,34 +6,6 @@ Given /^the following user records?$/ do |table|
|
|||
end
|
||||
end
|
||||
|
||||
Given /^the following user records with hash algorithm$/ do |table|
|
||||
User.delete_all
|
||||
table.hashes.each do | hash |
|
||||
password = hash[:password]
|
||||
algorithm = hash[:algorithm]
|
||||
hash.delete("algorithm")
|
||||
|
||||
user = FactoryGirl.create(:user, hash)
|
||||
|
||||
case algorithm
|
||||
when 'bcrypt'
|
||||
user.change_password( password, password )
|
||||
user.reload
|
||||
expect(BCrypt::Password.new(user.crypted_password)).to eq(password)
|
||||
when 'sha1'
|
||||
user.password = user.password_confirmation = nil
|
||||
user.send(:write_attribute, :crypted_password, user.sha1(password))
|
||||
user.save
|
||||
user.reload
|
||||
expect(user.crypted_password).to eq(user.sha1(password))
|
||||
else
|
||||
raise "Unknown hashing algorithm: #{algorithm}"
|
||||
end
|
||||
|
||||
user.create_preference({:locale => 'en'})
|
||||
end
|
||||
end
|
||||
|
||||
Given("no users exists") do
|
||||
User.delete_all
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue