Commit graph

1960 commits

Author SHA1 Message Date
Reinier Balt
ae32db7418 Merge pull request #18 from Popsch/fix_textboxes
fixed the boxes
2011-09-27 02:16:11 -07:00
Reinier Balt
4557b3de74 Merge pull request #20 from mattr-/ticket-1209
Add ruby-debug to the Gemfile
2011-09-27 02:15:30 -07:00
Reinier Balt
5d2fec325c Merge pull request #21 from afirel/master
Decode HTML entities when displaying todos formatted as TXT.
2011-09-27 02:14:22 -07:00
Andreas Brandl
f15017c972 Decode HTML entities when displaying todos formatted as TXT.
When rendering the text-feed for todos (_text_todo.rhtml) this
uses localized string 'as-is'. Those are html-encoded which
is not appropriate for TXT feeds (e.g. 'todos.due' is 'Fällig'
in German locale).
2011-09-27 01:07:02 +02:00
sfischme
fd44a1fb4b fixed the boxes 2011-09-23 18:22:20 -04:00
Matt Rogers
8157cdc088 Add ruby-debug to the Gemfile
ruby-debug is referenced in the 'Setting up a development environment'
page on the Tracks wiki. Include it in the Gemfile as part of the
development group
2011-09-22 22:09:56 -05:00
Reinier Balt
2563532022 implement new scenarios that were pending from the selenium-on-rails removal and fix a bug it uncovered 2011-09-14 20:50:21 +02:00
Reinier Balt
9eca1557fb add tests for adding multiple todos and multiple sequential todos
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 16:29:30 +02:00
Reinier Balt
2f42fad7c9 add checkbox to multiple action form to make all actions dependent on each other (sequential)
for people wanting sequential projects

Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 15:25:15 +02:00
Reinier Balt
a332f8f557 fix #1196. You can now transition from pending to project_hidden
One side effect though: althoug dependencies are still in place, the gui cannot differentiate between pending and hidden todos. The views currently do not show dependencies anymore in hidden projects. Postponing a fix for 2.2

Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 14:22:30 +02:00
Reinier Balt
5a168beef9 fix failing tests because of newer acts_as_list gem
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 13:49:06 +02:00
Reinier Balt
d9db33bc0d fix #990 by moving rsel scripts to cucumber and removing selenium-on-rails plugin
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 11:29:50 +02:00
Reinier Balt
4927f39594 fix some regressions caused by the newer acts_as_list gem
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-13 11:15:14 +02:00
Reinier Balt
92c8cfe61a fix another regression by the previous two commits :-(
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-13 07:11:33 +02:00
Reinier Balt
8fe5552d64 fix regression by last commit
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-12 22:58:39 +02:00
Reinier Balt
f5cabbf74d fix #1194 by checking the project_id and context_id 2011-09-10 02:31:53 +02:00
Reinier Balt
cdff38995c add tests for toggling visibility of collapsed contexts 2011-09-10 00:51:39 +02:00
Reinier Balt
30c2fb8b82 fix one deprecation warning for rubygems >= 1.8.2 2011-09-09 22:02:02 +02:00
Reinier Balt
998231066f update locales to latest changes. Please help review the changes since I let google translate determinse translations :-) 2011-09-09 21:52:39 +02:00
popsch
067df75e98 toggle notes patch from Christian Frank 2011-09-10 05:06:03 +08:00
Reinier Balt
39a38a8f73 update plugins: 2 are available as gems, 1 updated and removed yaml_db
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-09 21:07:22 +02:00
Reinier Balt
998c14fa71 Fix updating password
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-09 17:49:42 +02:00
Reinier Balt
50875cfa40 Merge pull request #16 from jstepien/bcrypt-v2
Hash passwords with BCrypt instead of SHA1
2011-09-08 08:08:33 -07:00
Reinier Balt
23c95f2833 Merge pull request #15 from antoninb/master
fix typo in fr.yml translation
2011-09-08 08:08:18 -07:00
Antonin Blanc
81d14edc2c fix typo in fr.yml translation 2011-09-08 00:54:58 +02:00
Reinier Balt
7d9f241a12 delete selenium scripts that have cucumber equivalents
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-07 22:54:22 +02:00
Jan Stępień
342b8ab4ef Require 'bcrypt' on top of app/models/user.rb 2011-09-07 17:19:04 +02:00
Jan Stępień
97431324db Password-rehashing "down" for migration 20110727073510
Reinier Balt wrote:
> One problem I see is when people want to downgrade. You chop the
> password field back to 40 chars, but it will cause all users incapable
> of logging in. Perhaps we can put a default password in the password on
> migration.down? like sha1('secret123') so we leave Tracks operable on
> downgrade?

https://github.com/bsag/tracks-old/pull/26#issuecomment-2001500
2011-09-07 16:06:03 +02:00
Jan Stępień
db77225ff7 More SHA-1 hashes handling scenarios using outlines 2011-09-07 16:06:03 +02:00
Jan Stępień
ad1f3b5862 Users with SHA-1 hashes can reset their passwords 2011-09-07 16:06:03 +02:00
Jan Stępień
5d3829cfbf Users with SHA-1 hashes are redirected to the password change page 2011-09-07 16:06:03 +02:00
Jan Stępień
a11937788e Prevent redefinition of factories
This commit catches Factory::DuplicateDefinitionErrors raised by
factory_girl 2.1.0. See the following thread for some background.

http://groups.google.com/group/factory_girl/browse_thread/thread/4df21d9240c20198
2011-09-07 16:06:02 +02:00
Jan Stępień
e221264e74 Fixed User specs broken in commit b33044
Expressions '...should == @user' caused specs to fail because of

  ArgumentError in 'User authentication resets password'
  wrong number of arguments (0 for 1)

Replacing expectations declared for User objects with expectations declared
for their id fields solves the problem and doesn't change specs' logic.
2011-09-07 16:06:02 +02:00
Jan Stępień
e5708f5ce7 Authenticate users with deprecated SHA-1 passwords 2011-09-07 16:06:02 +02:00
Jan Stępień
8e23d11054 Added User.uses_deprecated_password? method 2011-09-07 16:06:02 +02:00
Jan Stępień
34e0573fc4 Added to fixtures a user with a SHA-1 password 2011-09-07 16:06:02 +02:00
Jan Stępień
e7301608a6 Salting is unnecessary, BCrypt takes care of it
Source: http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
2011-09-07 16:06:02 +02:00
Jan Stępień
42437eadfa Changed the length of users.crypted_password to 60 2011-09-07 16:06:01 +02:00
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Reinier Balt
e7c0f6c3d2 add two example scripts to add a todo or a project template with todos from the command line. Thanks Vitalie and Popsch! 2011-09-07 15:40:11 +02:00
Reinier Balt
0b88c72570 Merge pull request #10 from mattr-/allow-comma-in-project-names
Allow comma in project names
2011-09-02 13:51:39 -07:00
Reinier Balt
8a437595a8 Merge pull request #7 from mattr-/master
Cleanup the environment files after converting to Bundler
2011-09-02 13:46:57 -07:00
Matt Rogers
f1c40c5594 Fix up the selenium tests
There was a selenium test that verified that projects could not have
commas that was previously missed. Modify that test so that it verifies
that the project was created successfully.
2011-09-01 23:12:39 -05:00
Matt Rogers
55bf457740 Allow projects to have commas in their name.
This removes the validation that checks to make sure there is no comma
in the name, and updates the tests to match.
2011-09-01 23:12:26 -05:00
Matt Rogers
f13e4d5b85 Remove the config.gem lines from the environment files
When using Bundler to resolve your gem dependencies, you do not need
these lines in the environment files.
2011-08-31 22:26:38 -05:00
Reinier Balt
5cbc0b26c8 Merge pull request #5 from mattr-/master
Convert tracks to use Bundler for gem resolution
2011-08-27 03:37:10 -07:00
Matt Rogers
1165c57f9f Remove the frozen rack gem
Apparently this I missed this when I cleaned up the other frozen gems
2011-08-19 21:34:57 -05:00
Matt Rogers
242bc44693 Remove the frozen rails version.
Since Bundler allows to specify exactly what versions of gems we need,
the vendored version isn't needed anymore.
2011-08-19 21:34:57 -05:00
Matt Rogers
c62cd1a06a Switch to requiring 'rake/rdoctask'
With rake 0.8.7, rake/rdoctask isn't deprecated and actually works, so
use that.
2011-08-19 21:34:56 -05:00
Matt Rogers
0e4614289b Make sure rake is version 0.8.7 2011-08-19 21:34:56 -05:00