Question

For the sign-up form for my website I don’t require that users confirm their passwords so there isn’t a password confirmation field.

However when a user resets their password and they click the link in their email and then taken to a change password page I require they confirm their password and provide a field for them to do this.

My question is how can I add password confirmation and min and max lengths for passwords with out it affecting my sign up form because they use they same model. For my signup form I have min and max length validation rules and want these to apply to the change password form but also include password confirmation.

What is the best and most convenient way to do this in your opinion?

Answer 1

If password confirmation should only be done for users already created, the simplest solution is :

class User < ActiveRecord::Base
   validates_confirmation_of :password, :unless => :new_record?
end

So it will only call the validation when setting the value for new users and not for users trying to sign up.