Updates

• Set activesupport as production dependency
• Update gemspec to not include specs into the gem

• The authorizy? helper now accepts custom parameters;

Fixes

• redirect_url was receiving the denied context instead of the controller's context;

Fixes

• Returns 403 status code, to represent recognized but not authorized, instead 401;

Features

• Added denied callback allowing a custom acess denied treatment;

Features

• Added options field to customize how the authorizy field is fetched;

Fixes

• When Cop returns anything different from true it is converted to false;

Fixes

• Returns 401 status code when user has no authorization on a XHR request;

Break Changes

• The permissions format now is:

{
  permissions: [
    ['controller', 'action'],
    ['controller2', 'action2'],
  ]
}

Fixes

• Calls the Authorizy::BaseCop#access? as the first check intercepting all requests;

Features

• Added RSpec matcher to make the test easier;

Features

• Enables permission control via JSON data;