Screencast: Authentifizierung in Rails 3.1

Downloads in verschiedenen Formaten:

source code
mp4
m4v
webm
ogv

Resourcen:

• Episode 250: Authentication from Scratch

bash

[bash]
rails g model user email:string password_digest:string
rails s -e production
[/bash]

secret_controller.rb

[ruby]
http_basic_authenticate_with :name => "frodo", :password => "thering"
[/ruby]

models/user.rb

[ruby]
class User < ActiveRecord::Base
attr_accessible :email, :password, :password_confirmation
has_secure_password
validates_presence_of :password, :on => :create
end
[/ruby]

sessions_controller.rb

[ruby]
def create
user = User.find_by_email(params[:email])
if user && user.authenticate(params[:password])
session[:user_id] = user.id
redirect_to root_url, :notice => "Logged in!"
else
flash.now.alert = "Invalid email or password"
render "new"
end
end

def destroy
session[:user_id] = nil
redirect_to root_url, :notice => "Logged out!"
end
[/ruby]

application_controller.rb

[ruby]
force_ssl

private

def current_user
@current_user ||= User.find(session[:user_id]) if session[:user_id]
end
helper_method :current_user
[/ruby]