Checklist: Rails Authentication

Updated . Posted . Visible to the public. Repeats.

Authentication is a special part of web applications. On the one hand, it usually is a crucial security mechanism restrict access to certain people and roles. On the other hand, most users authenticate only once, so it is very unlikely to spot issues by accident.

So, here comes a quick checklist to help you verifying your authentication solution is all set.

Reviewing authentication in a legacy app?

There are a lot of footguns with authentication when an app is old or has homegrown crypto. See our guide for fixing authentication in legacy apps

Dominik Schöler
Last edit
Tobias Kraze
License
Source code in this card is licensed under the MIT License.
Posted by Dominik Schöler to makandra dev (2018-05-22 08:49)