Commit graph

5 commits

Author SHA1 Message Date
Jan Stępień
e221264e74 Fixed User specs broken in commit b33044
Expressions '...should == @user' caused specs to fail because of

  ArgumentError in 'User authentication resets password'
  wrong number of arguments (0 for 1)

Replacing expectations declared for User objects with expectations declared
for their id fields solves the problem and doesn't change specs' logic.
2011-09-07 16:06:02 +02:00
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Eric Allen
6d3770c5fb Eliminated use of scenarios plugin
It doesn't work on Rails 2.3.5
2009-12-08 13:34:06 -05:00
bsag
6f760c768e Context model specs completed. Using fixtures for some examples currently, but might convert to mocks in future. Specs now offer same coverage as Test::Unit tests for Context model. 2008-06-22 15:30:38 +01:00
bsag
6e0999bd06 Initial work on specs for models - Context model spec started. 2008-06-21 14:28:01 +01:00