diff --git a/README.md b/README.md index e527557..e86f180 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ smart people at [Hashrocket](http://hashrocket.com/). For a steady stream of TILs from a variety of rocketeers, checkout [til.hashrocket.com](https://til.hashrocket.com/). -_758 TILs and counting..._ +_759 TILs and counting..._ --- @@ -481,6 +481,7 @@ _758 TILs and counting..._ - [Remove The Default Value On A Column](rails/remove-the-default-value-on-a-column.md) - [Rescue From](rails/rescue-from.md) - [Retrieve An Object If It Exists](rails/retrieve-an-object-if-it-exists.md) +- [Secure Passwords With Rails And Bcrypt](rails/secure-passwords-with-rails-and-bcrypt.md) - [Select A Select By Selector](rails/select-a-select-by-selector.md) - [Select Value For SQL Counts](rails/select-value-for-sql-counts.md) - [Set Schema Search Path](rails/set-schema-search-path.md) diff --git a/rails/secure-passwords-with-rails-and-bcrypt.md b/rails/secure-passwords-with-rails-and-bcrypt.md new file mode 100644 index 0000000..1495f1c --- /dev/null +++ b/rails/secure-passwords-with-rails-and-bcrypt.md @@ -0,0 +1,34 @@ +# Secure Passwords With Rails And Bcrypt + +If you are using [`bcrypt`](https://github.com/codahale/bcrypt-ruby) (at +least version 3.1.7), then you can easily add secure password functionality +to an +[ActiveRecord](https://github.com/rails/rails/tree/master/activerecord) +model. First, ensure that the table backing the model has a +`password_digest` column. Then add +[`has_secure_password`](https://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html) +to your model. + +```ruby +class User < ActiveRecord::Base + has_secure_password + + # other logic ... +end +``` + +You can now instantiate a `User` instance with any required fields as well +as `password` and `password_confirmation`. As long as `password` and +`password_confirmation` match then an encrypted `password_digest` will be +created and stored. You can later check a given password for the user using +the `authenticate` method. + +```ruby +user = User.find_by(email: user_params[:email]) + +if(user.authenticate(user_params[:password])) + puts 'That is the correct password!' +else + puts 'That password did not match!' +end +```