Rolling my first heroku app and am currently working on user authentication. (As well as authentication… for example user 1 cant access user 3’s stuff).
Is it easier just to roll my own scaffolded authentication? Or use something like devise? I can do the standard salted password authentication, store the user id in the session, and then pull from the database in controllers but is that secure? Would devise be better in the long run?
Thanks for the advice 🙂
Devise is highly recommended, I think it would save much of your time and it currently do all the magic you need involving the session with a good security.