I need to create a secure sign up/login page for my website. I am coding in Ruby on Rails.
I don’t know the first thing about doing this. I can create a simple sign up page, but how do I make sure that it is a secure page? I.e. I want the login/signup page to have a https://… URL (properly signed and whatnot).
What all do I need to do to go about this? Is there some way to make this process as easy as possible in ruby (i.e. is there some gem that allows for HTTPS logins/signups)?
Thanks!
You don’t need to implement this yourself. There are a couple of gems to help you do that.
I use Devise, here’s a simple howto http://blazingcloud.net/2011/01/08/devise-authentication-in-rails-3/
If you’d like to handle Facebook, twitter, openId and more, I recommend using Omniauth, it works well with devise.
Here is a tutorial to help you get started
https://github.com/plataformatec/devise/wiki/OmniAuth:-Overview