v0.10.5

Security

• Closing CSRF hole for Rails >= 3.0.4 apps.

Full Changelog

v0.10.4

Added

• Use HTML5 email fields.

Changed

• Emails forced to be downcased (particularly for iPhone user case).

Fixed

• Password reset requires a password.

Removed

• Formtastic views generator removed.

Full Changelog

v0.10.3.2

Fixed

• Fix gemspec to include all necessary files.

Full Changelog

v0.10.3.1

Fixed

• Ensure everything within features inside any engine directory is included in
  the gemspec.

Full Changelog

v0.10.3

Fixed

• Include features/engines in gemspec file list so generator works as
  expected.

Full Changelog

v0.10.0

Added

• Better email validation regular expression.

Removed

• Removed email confirmation step, was mostly a hassle and can always be added
  back in at the application level (instead of engine level) if necessary.
• Removed disable_with on forms since it does not allow IE users to submit
  forms. Read more.

Full Changelog

v0.9.1

Added

• This release supports Rails 3, capybara, and shoulda 2.10+.

Full Changelog

v0.9.0

Added

• Allow customization of cookie duration.

Changed

• Removed unnecessary db index.

Full Changelog

v0.8.8

Fixed

• Fixed sign_in and sign_out not setting current_user.

Full Changelog

v0.8.7

Fixed

• Fixed global sign out bug.
• Allow Rails apps to before_filter :authenticate the entire app
  in ApplicationController and still have password recovery work without
  overriding any controllers.
• Rails 3 fix for ActionController/ActionDispatch change.

Full Changelog