Want more GoRails?

GoRails is packed full with 710 lessons just like this one.

Sign up to get full access or log in to your account and sit back.

Unlock this lesson

Authenticate By & Password Challenge Methods In Rails 7.1

September 20, 2023

Track your progress

Sign in to track your progress and access subscription-only lessons.

Your Teacher

Collin Jilbert

Ruby on Rails Developer | Lover of Music | Skateboarder | Proud Papa | Co-editor @therubyradar | Launched @fleur_de_ruby

About This Episode

Has secure password is boasting some new benefits in Rails 7.1 with the addition of the authenticate_by method which reduces timing-based enumeration attack vulnerabilities. Also being introduced is the ability to provide a required password challenge.

Notes

Resources

Here is the commit which introduced the authenticate_by method along with the method as it currently stands on main

Here is the comment section which speaks about the password_challenge or XXX_challenge (the _challenge method is dynamically defined based on the attribute name you pass to has_secure_password