stevepolitodesign/rails-authentication-from-scratch

Issues

• Why is the ||= removed? current_user method

  #93 opened a year ago by E36lewis
  2

• Fix `current_user` test helper.

  #85 opened a year ago by Tarbetu
  3

• Update README to reference the generator

  #83 opened 2 years ago by stevepolitodesign
  0

• Confirmation token can be re-used before it expires

  #86 opened 2 years ago by stevepolitodesign
  0

• Limit remember cookie to httponly

  #87 opened 2 years ago by stevepolitodesign
  1

• Confused about `request.local?`

  #88 opened 2 years ago by matt17r
  1

• Amazing Guide

  #84 opened 2 years ago by siba2893
  1

• Abstract this into a generator.

  #63 opened 2 years ago by stevepolitodesign
  1

• Link to this repository from the Devise README

  #76 opened 2 years ago by stevepolitodesign
  1

• Allow user to manually destroy specific sessions

  #70 opened 2 years ago by stevepolitodesign
  0

• Use correct input type when collecting email addresses

  #73 opened 2 years ago by stevepolitodesign
  0

• Forget user when deleting an associated active session

  #78 opened 2 years ago by stevepolitodesign
  0

• Allow user to have multiple sessions

  #68 opened 2 years ago by stevepolitodesign
  0

• Allow user to view active sessions

  #69 opened 2 years ago by stevepolitodesign
  0

• Email Validations

  #67 opened 2 years ago by eclectic-coding
  3

• Single point of failure when using signed IDs

  #64 opened 2 years ago by ayushn21
  5

• Update mailer previews

  #65 opened 2 years ago by stevepolitodesign
  0

• Replace confirmation_token with signed_id

  #20 opened 2 years ago by stevepolitodesign
  4

• Replace password_reset_token with signed_id

  #59 opened 2 years ago by stevepolitodesign
  0

• Add status: :unprocessable_entity to all failed render responses

  #52 opened 2 years ago by stevepolitodesign
  0

• Rotate password reset tokens after successful password reset.

  #49 opened 2 years ago by stevepolitodesign
  0

• Rotate confirmation tokens after successful confirmation.

  #50 opened 2 years ago by stevepolitodesign
  0

• Prevent leaking email addresses when user is not confirmed

  #51 opened 2 years ago by stevepolitodesign
  0

• Update setup script

  #42 opened 2 years ago by stevepolitodesign
  0

• Update flash message when successfully reseting password

  #45 opened 2 years ago by stevepolitodesign
  0

• Add additional user links

  #41 opened 2 years ago by stevepolitodesign
  0

• Highlight that the session replay strategy prevents a user from being logged into multiple devices at once.

  #36 opened 2 years ago by stevepolitodesign
  6

• Login form does not show flash message

  #40 opened 2 years ago by jamgar
  2

• Proof README.

  #15 opened 2 years ago by stevepolitodesign
  0

• Improve method name for better clarity

  #33 opened 2 years ago by stevepolitodesign
  0

• Prevent redirecting to external URLs

  #32 opened 2 years ago by stevepolitodesign
  0

• Require params when confirming or reseting password.

  #31 opened 2 years ago by stevepolitodesign
  1

• Prevent Session Hijacking

  #18 opened 2 years ago by stevepolitodesign
  0

• Prevent leaking email addresses.

  #23 opened 2 years ago by stevepolitodesign
  2

• Consider removing case sensitivity when saving and searching for email addresses

  #24 opened 2 years ago by stevepolitodesign
  1

• Account for timing attacks

  #19 opened 2 years ago by stevepolitodesign
  0

• Authorize user before checking in they're confirmed.

  #27 opened 2 years ago by stevepolitodesign
  0

• Use flash.now on Sessions#create

  #25 opened 2 years ago by stevepolitodesign
  0

• Update email regex

  #21 opened 2 years ago by stevepolitodesign
  0

• I should be redirected to the page I was trying to access while logged out.

  #9 opened 2 years ago by stevepolitodesign
  0

• I should be able to remain logged in after closing the browser.

  #5 opened 2 years ago by stevepolitodesign
  0

• I should be able to update my email.

  #4 opened 2 years ago by stevepolitodesign
  0

• I should not be able to see sensitive data in the logs.

  #7 opened 2 years ago by stevepolitodesign
  1