{"push_id":552283109,"size":4,"distinct_size":1,"ref":"refs/heads/master","head":"2644ecd3701330115b00c3c72462f855f7493f11","before":"93fff5ff4df0f35ae27f17bbfec0ce3f0c2752d3","commits":[{"sha":"73c533b8ff7ffecb52e328e48d050791b8781c15","author":{"email":"6518d16a85396e511b329a97b21dda0c9acebabc@digital.cabinet-office.gov.uk","name":"Alex Tomlins"},"message":"Introduce capybara-email to test email journeys","distinct":false,"url":"https://api.github.com/repos/alphagov/signonotron2/commits/73c533b8ff7ffecb52e328e48d050791b8781c15"},{"sha":"53fb3f4d3fb9b5e4a3290576017d5934572bb000","author":{"email":"6518d16a85396e511b329a97b21dda0c9acebabc@digital.cabinet-office.gov.uk","name":"Alex Tomlins"},"message":"Improve passphrase reset tests to use email links.\n\nThese now test the full flow including following the links in the email.\nThis provides more complete coverage of the user journey.  This also\nadds a test to ensure that a password reset link can't be used more than\nonce.\n\nThis required changing the action_mailer host for the test environment\nto match the one Capybara uses.  Without doing this links followed from\nemails use a different session because the cookies are tied to the\nhostname.","distinct":false,"url":"https://api.github.com/repos/alphagov/signonotron2/commits/53fb3f4d3fb9b5e4a3290576017d5934572bb000"},{"sha":"fb4e0e0e7a5f6f8eefb886d29bdcd5ea6a525f7f","author":{"email":"6518d16a85396e511b329a97b21dda0c9acebabc@digital.cabinet-office.gov.uk","name":"Alex Tomlins"},"message":"Don't change reset_password_token on first access.\n\nThis partially reverts a044b79 (#65).\n\nIt would seem that some of our users have virus-scanning systems that\nfollow links in emails to check for anything malicious.  This was\nbreaking the passphrase reset flow because the token was being reset the\nfirst time the page was accessed.  The root of this problem is that we\nhave a GET route in the application that has side-effects.\n\nThis removes this functionality so that a password reset token will\ncontinue to work until the passphrase has been reset, at which point\nit's cleared (this is standard devise behaviour).","distinct":false,"url":"https://api.github.com/repos/alphagov/signonotron2/commits/fb4e0e0e7a5f6f8eefb886d29bdcd5ea6a525f7f"},{"sha":"2644ecd3701330115b00c3c72462f855f7493f11","author":{"email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@roseman.org.uk","name":"Daniel Roseman"},"message":"Merge pull request #313 from alphagov/fix_password_reset_flow\n\nFix password reset flow","distinct":true,"url":"https://api.github.com/repos/alphagov/signonotron2/commits/2644ecd3701330115b00c3c72462f855f7493f11"}]}