Drifting Ruby

View

Episodes

Sort

Have I Been Pwned

#470 Aug 18, 2024 pro

Pwned Passwords are hundreds of millions of real world passwords previously exposed in data breaches.In this episode, we will look at adding this integration into our Rails applications where Devise or Action Auth are used as the authentication solutions.

rails authentication security

Action Auth

#437 Jan 14, 2024 pro

With Rails 7.1 came a bunch of new features around token generation and with this release, I've been working on a new authentication solution that provides the basic requirements of authentication out of the box, but also has advanced features like Passkeys that are easy to implement and use.

rails 7.1 authentication

Cloudflare Turnstile

#379 Dec 11, 2022 pro

Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. In this episode, we'll look at implementing this a few different ways and resolving some issues with Turbo.

rails cloudflare security authentication

Magic Links

#371 Oct 16, 2022 pro

Magic Links is a passwordless authentication method where you receive a emailed link to proceed with signing in. In this episode, we look at swapping out a lot of the core functionalities of Devise with Magic Links as well as alternatives for using this methodology without Devise.

rails authentication devise

Secure User Passwords

#349 May 15, 2022 pro

We have a look at integrating the HaveIBeenPwned service with Devise so that our users will some awareness of their password being potentially compromised.

rails security authentication

Authentication with Sorcery

#321 Oct 31, 2021 pro

Sorcery is a stripped-down, bare-bones authentication library, with which you can write your own authentication flow. In this episode we look at creating the controllers and views for a simple authentication solution.

authentication rails security

Reset Password from Scratch

#316 Sep 26, 2021 pro

Continuing from Episode 300, we look at creating a password reset feature. We explore some of the security concerns around this feature and some mitigating options.

authentication rails security

Hardware Security Keys

#302 Jun 27, 2021 pro

Using a hardware security key for multi-factor authentication is a great way to protect user accounts. In this episode, we look at implementing security keys into our Ruby on Rails applications with Devise user accounts.

authentication rails security

Managing User Session Devices

#301 Jun 20, 2021 pro

In this episode, we look to add on some features to Device with tracking devices that a user has authenticated with and then remote deleting sessions.

authentication devise rails security

Authentication from Scratch

#300 Jun 13, 2021 pro

It's never a bad thing to understand how authentication works in a Ruby on Rails application without reaching for a gem. In this episode, we look at how authentication works in a modern Ruby on Rails application and some reasons why we shouldn't roll our own solution.

authentication rails

Learning Paths

Video Logs new

Blog

Merchandise

Forums new

View

Episodes

Sort

Tags

Have I Been Pwned

Action Auth

Cloudflare Turnstile

Magic Links

Secure User Passwords

Authentication with Sorcery

Reset Password from Scratch

Hardware Security Keys

Managing User Session Devices

Authentication from Scratch