Remove "_token" from parseIdentity

src/Confide/CacheLoginThrottleService.php

@@ -72,12 +72,18 @@ public function isThrottled($identity)
      */
     protected function parseIdentity($identity)
     {
-        // If is an array, remove password, remember and then
-        // transforms it into a string.
+        // The fields that are relevant for login throttling.
+        $relevantFields = ['email'];
+
         if (is_array($identity)) {
-            unset($identity['password']);
-            unset($identity['remember']);
-            $identity = serialize($identity);
+            // If is an array, remove all non important fields and
+            // transforms it into a string.
+            $cleanedIdentity = array_intersect_key(
+                $identity,
+                array_flip($relevantFields)
+            );
+
+            $identity = serialize($cleanedIdentity);
         }
 
         return $identity;

tests/Confide/CacheLoginThrottleServiceTest.php

@@ -133,7 +133,12 @@ public function testShouldParseIdentity()
         */
         $throttleService = m::mock('Zizaco\Confide\CacheLoginThrottleService[parseIdentity]', []);
         $throttleService->shouldAllowMockingProtectedMethods();
-        $identity = ['email'=>'someone@somewhere.com','password'=>'123'];
+        $identity = [
+            'email'=>'someone@somewhere.com',
+            'password'=>'123',
+            '_token'=>'somethingusual',
+            'remember'=>true
+        ];
 
         /*
         |------------------------------------------------------------