Interesting Things

All strategies that inherit from Devise::Strategies::Authenticatable (which may be all right now) check for user.active?. To deactivate a user, just add an active column to User model, and a message to present with inactive_message:

# User model

def active?
  !!active
end

def inactive_message
  "Sorry, this account has been deactivated."
end

and to test:

# Any session controller spec

it "should throw an error with an inactive user" do
  user = Factory.create(:user, :password => "password")
  user.active = false
  user.save!

  error = catch(:warden) do
    post :create, :user => {:username => user.username, :password => "password"}
  end

  error[:message].should =~ /deactivated/
end