Devise Two Factor Authentication 2FA in Rails 7

[@Damaskeron]

Thank you. This is a very clear and really working instruction. I managed to add it to my program, I just had to update the versions of the components

[@YJP-rr6xm]

Many thanks

[@rev_krakken70]

Hi! Is there any video by you.. where you are building rest api using ruby on rails? I want to know how to integrate react/angular apps with ruby on rails

[@Deanin]

Adding it to my list. There's a few that have covered it with React, but I think I would handle it differently these days. But here's a few videos I have done. Doorkeeper Devise users in React: kzbin.info/www/bejne/gajQZXiaq9Gkntk React SPA: kzbin.info/www/bejne/r6Cve4ugertlpK8 React CRUD API: kzbin.info/www/bejne/kHjRfqSBnJJ2p5Y

[@rev_krakken70]

@@Deanin thanks a lot 👍

[@MalachiRails]

Insane video. Quite complicated!

[@crisnahine1570]

mind your own monkey @MalachiRails ! We don't need you here!

[@ZilloweZ]

Hi, can you make a tutorial about making a forum more like reddit with up vote and down vote that actually work, and a comments section that you can reply to a comment and then creating a thread, and with each comment a different unique url, and a home page display recent post, and with user most recent posts, with ability to create forums(subreddit) and without JavaScript at all, I know that's a lot of work, but I appreciate it, and you the only ROR developer that actually makes tutorials that is actually helpful. Thanks a lot for your tutorials.

[@Deanin]

I'll see what I can do, but it might be worth taking a look at a tool that can handle some of this stuff for you like Thredded. kzbin.info/www/bejne/l6WUfGxvdqiAask

[@ZilloweZ]

​@@Deanin I have some questions about Thredded gem, is there a better way that I can talk to you?

[@mustafagulzar5516]

brilliant

[@Balabala-iq1ne]

the show otp page can be viewed by guest, how to prevent that, because if someone press verify otp without login makes app error

[@krzysztofkeczkowski9666]

Thanks! :)

[@dp2586]

I am using default warden.authenticate from devise the remember_me and lockable feature working. But using custom warden authenticate from this video make feature remember_me and lockable account not working. Any solution ?

[@naota0]

Hi @dp2586 Lockable : this is because in the video, he is using `resource && resource.valid_password?(params['user']['password'])` in the custom strategy, so Devise will never perform the lockable strategy. To fix that, just replace the code I mentioned by `resource&.valid_for_authentication? { resource&.valid_password?(params.dig("user", "password")) }`. It will call the method `valid_for_authentification` in the model Lockable and the lockable feature will work again. Rememberable : it is not really an issue. devise-two-factor adds an additional security layer with the OTP. An OTP is a one-time password so, as you know, it is valid only once, for the current session. So, by default, you should not be able to automatically sign in after restarting your browser, since the session has been closed and the last OTP has been consumed. What you can do is that, in your SessionsController#create, add a check `remember_me_is_active?(resource)` (this method is provided by Devise) and, if so, then you can use `bypass_sign_in(resource)` instead of redirecting the user to the OTP page.

[@hamitkamberi4134]

I have a problem while a click the button enable OTP can you help ?

[@azizdevfull]

It Fantastic : )

[@Deanin]

Thank you! Always nice to see you here :)

[@dc366]

At 18:46, I added otp_attempt and devise was still complaining about unpermitted params. You have to uncomment the line "before_action :configure_account_update_params, only: [:update]"