Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
How would I create sessions with rails 3 has_secure_password? I’ve checked out http://guides.rubyonrails.org/security.html.
And none of it is really specific. do I have to use sessions method? What is the community standard? I do not want to use Devise/Cancan.
I only need simple authorization/authentication based on cookies.
Should I be storing User objects in cookies?
Would the password be vulnerable?
If you have the money to spend, Railscasts Pro covers this in detail using has_secure_password in Episode 250 Revised, Authentication from Scratch (revised)
There is also a slightly older version of the screencast that is Free and includes a detailed ASCIIcast. The sessions portion might be useful for you to read or watch.