User Authentication and Authorization
Explore how to set up user authentication and authorization with the Devise gem in Rails. Understand integrating Devise into your application, generating user models, and configuring routes to enhance security testing.
We'll cover the following...
We’ve gotten quite far in our example without adding a user model to it, which we’ll rectify now.
We need to get users and passwords into the system without spending too much time in the setup weeds, so we can focus our attention on the security issues that having users causes. To do that, we use the Devise gem for basic user authentication and focus on using Devise as part of our security and testing goals.
Installing Devise
Devise is a big, multifaceted gem, and we’ll only be scratching the surface of what it can do. It handles all kinds of login needs, including confirmation emails, password changes, “remember me” cookies, and much more. First up, we need to put it in the Gemfile:
gem "devise"