This is at least one issue with this
to logout of CAS you need session information but the logout method blows this away so I do the cas log out before the session is killed so the session persistest in rails. Because I needed to move the CAS before filters into login_cas and out of the application to make it work side by side. The user will still be logined into tracks even though their CAS session is closed as the session will still be there.
def logout
@user.forget_me if logged_in?
cookies.delete :auth_token
session['user_id'] = nil
if ( SITE_CONFIG['authentication_schemes'].include? 'cas') && session[:cas_user]
CASClient::Frameworks::Rails::Filter.logout(self)
else
reset_session
notify :notice, "You have been logged out of Tracks."
redirect_to_login
end
end
The other issue I have with this is that:
I could not find a use case for having mixed auth when using CAS. The reason to move to CAS is that all your users use CAS all the time. Even for admin accounts. Moodle is a good example of this in that when you activate CAS the default is that you can now only access moodle via CAS. By allowing mixed auth and self signup you end up with a anyone (the public) being able to sign up for accounts.
Translating from strftime format to jQuery UI's format on the fly on every
page render. That kind of sucks, but it works. I think I have enough
translations here to cover everybody, but possibly not.
Removing UJS caused the home page to stop rendering due to references to
apply_behavior. I had to take care of that before I could proceed at all.
Some Autocomplete stuff has been yanked out and needs to go back in at some point.
Had to replace Protoload with jQuery.blockUI. It's a bit bigger, but oh well.
Todo unchecking is still buggy, but needs a bunch more work to make it happen.
Also added some useful globals to the standard layout for later access by application.js.
* Ran rake rails:update
* Added old actionwebservice framework
* Updated RSpec and RSpec-Rails
* Removed asset_packager plugin (not compatible, Scott no longer maintaining), and replaced with bundle_fu. See the bundle_fu README for more info.
* Hacks to UJS and ARTS plugins, which are no longer supported. Probably should move off both UJS and RJS.
* Hack to flashobject_helper plugin (upgrade to Rails 2.2-compatible version if/when it comes out.)
* Hack to skinny-spec plugin, for Rails 2.2 compatibility. Should check for official release.
* Hacks to resource_feeder plugin, for Rails 2.2 compatibility. Should check for official release (not likely) or move off it.
* Addressed some deprecation warnings. More to come.
* My mobile mime type hackery is no longer necessary with new Rails features. Yay!
* Updated environment.rb.tmpl with changes
TODO:
* Restore view specs marked pending
* Fix failing integration tests.
* Try selenium tests.
* Investigate OpenID support.
* Address deprecation warnings.
* Consider moving parts of environment.rb to initializers
* Address annoying config.gem warning about highline gem
Thanks marqpdx for finding this fix!
On my windows vista laptop with ff3 alt-shift-p will still start Windows Media Player, but the other accesskeys now seem to work for me
* fixed redirect to last page instead of /mobile after adding a new todo using mobile interface
* fixed adding new todo to tickler instead of home after marking a todo belonging an active recurring todo complete
Up to r881 of svn repository
* svn-tracking: (22 commits)
Added .gitconfig
Added yaml_db plugin: http://opensource.heroku.com/
applied patch from Eric from #732fixes#730 restores ability to delete user from user management page
fixes#724 where editing todos truncates the project name of the todo when the project name contains quotes (")
Applied patch from Eric Pallen whcih automatically converts url's to links. Thanks Eric!
explain that yaml cannot yet be used for backup as importing is not implemented yet. from mailinglist.
hopefully fixes #727.Changes the check on running animation to finished animation
regenerate compressed js and cleanup whitespace
turns out that getElementsByClassName is removed from prototype and it therfore falls back to the function of the browser which has different semantics. Found here http://www.prototypejs.org/api/utility/getElementsByClassName
forgot to create a new compressed js from the previous js changes
in the stats page you can downdrill to see the active todos in a certain week from the running time charts. This patch adds the option to see all active todos from the selected week and older.
fix#727. Adds a check to prevent expand/collapse while a previous expand/collaps is still animating
fixed small problem where updating a todo from mobile resulted in an error becase source_view was nil
fixes#726. Thanks Eric Pallen for the fix. The mobile view showed active todos from completed projects while the home page does not.
merges changes from tracks1.6 to trunk
prepares trunk for 1.6 release
fixes#713. Adds behavior for edit/star/delete/check buttons of todo even if there is no todo to show. This makes sure that the behaviors are present when you add a new todo through AJAX.
fixes#718. The link included the number of actions which resulted from last commit
removed some more whitespace to reduce the download of the mobile view.
...
Up to r881
* 'master' of /Users/jackie/Sites/tracks_svn: (22 commits)
Added .gitconfig
Added yaml_db plugin: http://opensource.heroku.com/
applied patch from Eric from #732fixes#730 restores ability to delete user from user management page
fixes#724 where editing todos truncates the project name of the todo when the project name contains quotes (")
Applied patch from Eric Pallen whcih automatically converts url's to links. Thanks Eric!
explain that yaml cannot yet be used for backup as importing is not implemented yet. from mailinglist.
hopefully fixes #727.Changes the check on running animation to finished animation
regenerate compressed js and cleanup whitespace
turns out that getElementsByClassName is removed from prototype and it therfore falls back to the function of the browser which has different semantics. Found here http://www.prototypejs.org/api/utility/getElementsByClassName
forgot to create a new compressed js from the previous js changes
in the stats page you can downdrill to see the active todos in a certain week from the running time charts. This patch adds the option to see all active todos from the selected week and older.
fix#727. Adds a check to prevent expand/collapse while a previous expand/collaps is still animating
fixed small problem where updating a todo from mobile resulted in an error becase source_view was nil
fixes#726. Thanks Eric Pallen for the fix. The mobile view showed active todos from completed projects while the home page does not.
merges changes from tracks1.6 to trunk
prepares trunk for 1.6 release
fixes#713. Adds behavior for edit/star/delete/check buttons of todo even if there is no todo to show. This makes sure that the behaviors are present when you add a new todo through AJAX.
fixes#718. The link included the number of actions which resulted from last commit
removed some more whitespace to reduce the download of the mobile view.
...
