phatworx/devise_security_extension — pull request #31 by jedl (2012-03-01 17:33:38+00:00)
Title: Password Archivable Bug fix

I am working with a client where security is very high on the priority list and I must say that devise_security_extension addresses many of the concerns extremely well... nice work!

While using and learning about devise_security extension I came across a handful of bugs. I did my best to document them clearly in each of the commits. The main bug that I came across was the password archivable module allowing the most recent password to be reused a second time. This exact case is validated in the secure validatable module, which likely masked the problem. I therefore created a fix for the bug in the password archivable module and removed the current_equal_password_validation validation from the secure validatable module.

Let me know if you have any questions and thanks for all of your great work on the gem.

- Jed