Drifting Ruby

View

Episodes

Sort

Rate Limit

#482 Nov 10, 2024 pro

In Rails 7.2, a new feature was added that allows us to establish rate limits where the number of requests in a certain amount of time can be throttled. In this episode, we'll dive into the specifics of the rate limits and how they can be used.

rails security request

Have I Been Pwned

#470 Aug 18, 2024 pro

Pwned Passwords are hundreds of millions of real world passwords previously exposed in data breaches.In this episode, we will look at adding this integration into our Rails applications where Devise or Action Auth are used as the authentication solutions.

rails authentication security

Authentication Timeout

#448 Mar 24, 2024 pro

In this episode, we'll explore adding the ability to extend an authenticated session wish is about to expire. We'll be using a Stimulus controller for the bulk of the logic and the provided functionality that Devise gives us out of the box.

rails security devise

Masked Fields

#403 May 28, 2023 pro

Learn to create a reusable Stimulus controller to be able to toggle fields so that we can hide sensitive information from prying eyes, screenshots or when sharing our screen.

rails stimulusjs security javascript

Session Hijacking

#400 May 7, 2023 free

In this episode, we explore session hijacking and an approach that we can take to limit the risk. There are some user experience and functionality caveats to this approach so they must be taken into consideration as well.

rails security

generates_token_for

#380 Dec 18, 2022 pro

In Rails 7.1, we're going to get a new feature that will allow us to generate tokens for attributes. With generates_token_for, a token can embed data from a record. When using the token to fetch the record, the data from the token and the data from the record will be compared.

rails 7.1 security

Cloudflare Turnstile

#379 Dec 11, 2022 pro

Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. In this episode, we'll look at implementing this a few different ways and resolving some issues with Turbo.

rails cloudflare security authentication

Secure User Passwords

#349 May 15, 2022 pro

We have a look at integrating the HaveIBeenPwned service with Devise so that our users will some awareness of their password being potentially compromised.

rails security authentication

Authentication with Sorcery

#321 Oct 31, 2021 pro

Sorcery is a stripped-down, bare-bones authentication library, with which you can write your own authentication flow. In this episode we look at creating the controllers and views for a simple authentication solution.

authentication rails security

Reset Password from Scratch

#316 Sep 26, 2021 pro

Continuing from Episode 300, we look at creating a password reset feature. We explore some of the security concerns around this feature and some mitigating options.