Search results

Security issue: database_authenticatable is implicitly added by concern, allowing 2FA bypass with devise-two-factor

Status: Open.

#1682 In lynndylanhurley/devise_token_auth;

· fillipeppalhares opened on Mar 31, 2026

When will devise 5 support be released? (needed for security fix)

Status: Open.

#1681 In lynndylanhurley/devise_token_auth;

· waleed0102 opened on Mar 24, 2026

Running into undefined method 'parse' for class CGI on Ruby 4.0.1

Status: Open.

#1680 In lynndylanhurley/devise_token_auth;

· kushagra-03 opened on Mar 9, 2026

ConfirmationsController doesn't use redirect_options properly

Status: Open.

#1679 In lynndylanhurley/devise_token_auth;

· newfylox opened on Mar 3, 2026

Duration arithmetic mismatch in v1.2.6 causes newly created tokens to be immediately evicted with variable-length lifespans

Status: Open.

#1677 In lynndylanhurley/devise_token_auth;

· naanlizard opened on Mar 2, 2026

Cookie overflow

Status: Open.

#1673 In lynndylanhurley/devise_token_auth;

· sebfie opened on Nov 24, 2025

Clean up unsupported Ruby versions and remove unnecessary files

Status: Open.

#1667 In lynndylanhurley/devise_token_auth;

· hatsu38 opened on Nov 1, 2025

Security issue disclosure

close-in-7-days

Status: Open.

#1663 In lynndylanhurley/devise_token_auth;

· vlyv opened on Sep 19, 2025

Question/propostal: can we use SELECT ... FOR UPDATE SKIP LOCKED if using a "token buffer"?

Status: Open.

#1660 In lynndylanhurley/devise_token_auth;

· lucashungaro opened on Jul 23, 2025

Previous tokens remain valid indefinitely, bypassing batch window throttle

Status: Open.

#1659 In lynndylanhurley/devise_token_auth;

· leightjohnson93 opened on Jul 16, 2025

Omniauth redirect should send access-token not auth_token

Status: Open.

#1656 In lynndylanhurley/devise_token_auth;

· bettysteger opened on Jun 24, 2025

Change logs with more meaningful information

Status: Open.

#1653 In lynndylanhurley/devise_token_auth;

· edusantana opened on Mar 27, 2025