dmacvicar/devise_unix2_chkpwd_authenticatable — pull request #5 by lslezak (2012-11-23 15:39:26+00:00)
Title: Do not log authentication token sent via HTTP Basi Authentication

Token created by :token_authenticatable module can be sent also via HTTP Basic Authentication as user name, in that case it must not be logged (an attacker could read the token from log and compromise the system)

Version 0.4.2

(See https://bugzilla.novell.com/show_bug.cgi?id=781128#c2)