Commit graph

1922 commits

Author SHA1 Message Date
Jan Stępień
42437eadfa Changed the length of users.crypted_password to 60 2011-09-07 16:06:01 +02:00
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Reinier Balt
0b88c72570 Merge pull request #10 from mattr-/allow-comma-in-project-names
Allow comma in project names
2011-09-02 13:51:39 -07:00
Reinier Balt
8a437595a8 Merge pull request #7 from mattr-/master
Cleanup the environment files after converting to Bundler
2011-09-02 13:46:57 -07:00
Matt Rogers
f1c40c5594 Fix up the selenium tests
There was a selenium test that verified that projects could not have
commas that was previously missed. Modify that test so that it verifies
that the project was created successfully.
2011-09-01 23:12:39 -05:00
Matt Rogers
55bf457740 Allow projects to have commas in their name.
This removes the validation that checks to make sure there is no comma
in the name, and updates the tests to match.
2011-09-01 23:12:26 -05:00
Matt Rogers
f13e4d5b85 Remove the config.gem lines from the environment files
When using Bundler to resolve your gem dependencies, you do not need
these lines in the environment files.
2011-08-31 22:26:38 -05:00
Reinier Balt
5cbc0b26c8 Merge pull request #5 from mattr-/master
Convert tracks to use Bundler for gem resolution
2011-08-27 03:37:10 -07:00
Matt Rogers
1165c57f9f Remove the frozen rack gem
Apparently this I missed this when I cleaned up the other frozen gems
2011-08-19 21:34:57 -05:00
Matt Rogers
242bc44693 Remove the frozen rails version.
Since Bundler allows to specify exactly what versions of gems we need,
the vendored version isn't needed anymore.
2011-08-19 21:34:57 -05:00
Matt Rogers
c62cd1a06a Switch to requiring 'rake/rdoctask'
With rake 0.8.7, rake/rdoctask isn't deprecated and actually works, so
use that.
2011-08-19 21:34:56 -05:00
Matt Rogers
0e4614289b Make sure rake is version 0.8.7 2011-08-19 21:34:56 -05:00
Matt Rogers
f69e3e42b0 Update the dependencies so that the tests will run
There were several places where newer versions of gems were being
pulled.  Those newer versions were breaking the functional tests and the
cucumber features.

Go back to known working versions of the gems that were causing failures
2011-08-19 21:34:56 -05:00
Matt Rogers
dc8d2234f0 Just use actionwebservice in the environment file
Since we're not explictly requiring datanoise-actionwebservice anymore,
we need to modify this to match what we are using.
2011-08-19 21:34:56 -05:00
Matt Rogers
69cb08378d Override Rails' default gem handling and replace it with Bundler
Bundler does a better job of manage dependencies and is used by default
in Rails 3 so this will move Tracks a bit closer towards a Rails 3
conversion.
2011-08-19 21:34:56 -05:00
Matt Rogers
e93a6970bd Require the ruby-openid gem as openid
Fixes the errors I was seeing when trying to run the unit tests
2011-08-19 21:34:56 -05:00
Matt Rogers
a999d0f4c0 Use actionwebservice from dejan/actionwebservice
The default version of actionwebservice removes wsdl_service_name. The
dejan/actionwebservice repository from git is a fork of the datanoise
repository that we were using that has the gemspec fixed to not use a
specific version of Rails.
2011-08-19 21:34:56 -05:00
Matt Rogers
2ff4d7961d Remove the vendored gems
Bundler allows us to specify the exact versions of gems which eliminates
the need for vendoring gems (IMO)
2011-08-19 21:34:56 -05:00
Matt Rogers
5daff93349 Setup bundler for use with Tracks
Add the Gemfile and Gemfile.lock files used to specify the dependencies
of the app.

The Gemfile specifies the dependencies and the Gemfile.lock is a
snapshot of the dependencies. If the Gemfile changes, then Bundler will
look at the differences between the Gemfile and the Gemfile.lock to
determine what other gems to install or upgrade
2011-08-19 21:34:55 -05:00
Reinier Balt
84ad01a6f6 improve tests for preferences and fix a pending cucumber step 2011-08-19 12:51:06 +02:00
Reinier Balt
07b05d01f7 fix #922. You can now mark a todo complete from the tickler. Also fixed some small aasm corner cases found by this change 2011-08-18 17:15:00 +02:00
Reinier Balt
367907eab2 enable new password when only 'database' is available as authentication type 2011-08-18 13:00:14 +02:00
Reinier Balt
8e6699becb Merge branches 'preferences' and 'master' 2011-08-18 12:49:29 +02:00
Reinier Balt
40a7cc2d3a add cucumber scenarios for new preferences 2011-08-18 12:48:59 +02:00
Reinier Balt
bd7419a592 fix failing tests 2011-08-18 09:38:48 +02:00
Reinier Balt
555311b681 updating preferences on user and prefs model work. also add date_format picker 2011-08-17 22:51:02 +02:00
Reinier Balt
89ec9898a3 finish gui changes 2011-08-17 20:23:02 +02:00
Reinier Balt
977b57dbb2 first pass to distribute settings over tabs 2011-08-17 20:23:02 +02:00
Reinier Balt
3bf8c461f1 add last pending scenarios
the scenarios for preferences will be added with the planned changes
2011-08-17 10:57:30 +02:00
Reinier Balt
ac6cd8afbc upgrade jquery to 1.6.2 and jquery-ui to 1.8.13 2011-08-17 10:30:29 +02:00
Reinier Balt
ffd56ad958 fix mongrel workaround for rails 2.3.14 2011-08-17 10:08:28 +02:00
Reinier Balt
fe1f67a8cf upgrade vendored rails to 2.3.14 2011-08-17 09:55:36 +02:00
Reinier Balt
2db1640695 finish pending scenarios for statistics feature and update CHANGELOG 2011-08-17 09:06:22 +02:00
Reinier Balt
c6c51ee83c fix failing specs 2011-08-16 11:49:04 +02:00
Reinier Balt
a8f4199adc clean up cucumber scenarios and add a few more 2011-08-15 20:44:59 +02:00
Reinier Balt
ef961188ea add more cucumber scenarios 2011-08-15 17:04:59 +02:00
Reinier Balt
b40998e0bc add a few cucumber scenario's for editing a todo 2011-08-11 20:53:54 +02:00
Reinier Balt
f544c80fbc add some pending cucumber scenarios and fix a small bug it uncovered 2011-08-11 17:13:01 +02:00
Reinier Balt
30c578f93a fix failing selenium scenarios because of starring changes 2011-08-11 10:13:53 +02:00
Reinier Balt
75a9bbe7f4 Merge pull request #4 from u2ix/master
Fixed some tests for 'starred todos'
2011-08-07 01:09:26 -07:00
Demian Gemperli
3d948989f8 Set back cucumber to the right version for rails 2.x 2011-08-05 18:51:16 +02:00
Demian Gemperli
367476bd77 fixed tests for starred todos 2011-08-04 23:14:29 +02:00
Reinier Balt
2441aa92b5 correct small errors in docs 2011-08-02 11:01:50 +02:00
Reinier Balt
724b279f41 Merge pull request #2 from mickeyreiss/fix_locales
Added missing translation from /done in en and de.
2011-07-30 11:42:25 -07:00
Reinier Balt
17ee2b6c70 Merge pull request #3 from u2ix/master
Did ticket #928 Have a Star option on task entry screens
2011-07-30 11:41:03 -07:00
Demian Gemperli
c45b11dc70 Have a Star option on task entry screens #928 2011-07-30 18:52:11 +02:00
Mickey Reiss
0d2a057d27 Added missing translation from /done in en and de.
TODO: Same translation for other languages (these were the only two I
know)
2011-07-28 06:16:15 -04:00
Reinier Balt
f4a07110ff change urls to their new location in documentation 2011-07-27 15:39:47 +02:00
Reinier Balt
6576984f76 fix #1184 by adding the fr locale contributed by olivierrochvilato. Thanks. Also adds the es locale for datepicker 2011-07-27 15:24:10 +02:00
bsag
ed26ebdfb6 Added information about the move to the TracksApp Organization. 2011-07-16 11:58:32 +01:00