Changeset 449

Timestamp:

08/24/06 05:25:17 (2 years ago)

Author:

snowblink

Message:

Adding password history table.
Currently this will just copy the latest password to the table.
Can check if a user's password has expired.
Password expiry can be set by: LoginEngine?.config(:password_expiry)
0 means it will not expire

Files:

• login_engine/trunk/app/models/password.rb (added)
• login_engine/trunk/db/migrate/002_add_password_table.rb (added)
• login_engine/trunk/lib/login_engine.rb (modified) (1 diff)
• login_engine/trunk/lib/login_engine/authenticated_user.rb (modified) (3 diffs)
• login_engine/trunk/test/unit/user_test.rb (modified) (1 diff)

login_engine/trunk/lib/login_engine.rb

@@ -52 +52 @@
-  if ActiveRecord::Base.pluralize_table_names
-    config :user_table, "users"
+    config :password_table, "passwords"
-  else
-    config :user_table, "user"
+    config :password_table, "password"
-  end
+
+  # password expiry time in days
+  # 0 means it will not expire
+  config :password_expiry, 0
-  
-  # controls whether or not email is used

login_engine/trunk/lib/login_engine/authenticated_user.rb

@@ -31 +31 @@
-        attr_accessor :password, :password_confirmation
-      
-
+copy_password_to_password_table, :
-        after_validation :crypt_password
+
+        has_many :passwords, :order => 'created_at DESC'
-
-      end
@@ -126 +128 @@
-      "#{self.firstname} #{self.lastname}"
-    end
+
+    # some systems want to expire a user's password after a certain period
+    # If password expiry set to 0, then passwords don't expire
+    def password_expired?
+      if LoginEngine.config(:password_expiry) == 0
+        return false
+      else
+        return LoginEngine.config(:password_expiry).days.ago > self.passwords.first.created_at
+      end
+    end
-    
-    protected
@@ -146 +158 @@
-    end
-
+    def copy_password_to_password_table
+      if @new_password
+        Password.create(:user_id => id,
+                        :salt => salt,
+                        :salted_password => salted_password)
+      end
+      true
+    end
+      
+
-    def new_security_token(hours = nil)
-      write_attribute('security_token', AuthenticatedUser.hashed(self.salted_password + Time.now.to_i.to_s + rand.to_s))

login_engine/trunk/test/unit/user_test.rb

@@ -135 +135 @@
-  end
-
+  def test_password_expiry
+    u = User.new
+    u.login = 'password_test'
+    u.email = 'bobs@email.com'
+    u.change_password("password1", "password1")
+    assert u.save
+    assert 1, u.passwords.length
+    assert !u.password_expired?, "Password expired when it has just been created"
+
+    LoginEngine::CONFIG[:password_expiry]=1
+    u.passwords.first.created_at = 1.day.ago
+    u.passwords.first.save
+    assert u.password_expired?, "Password should have expired"
+    
+    
+  end
-end