Rails 7.1 Authentication From Scratch

► Check out gorails.com for Pro episodes and more!
► SaaS business template for Ruby on Rails with built-in features like Payments, Teams, and much more: jumpstartrails.com
► Ruby on Rails hosting with Hatchbox.io: hatchbox.io
► Learn how to add Stripe Payments (with SCA support!) with Ruby on Rails: courses.gorails.com/payments-...

[@wotok7]

Chris congratulations, gorgeous video! As a Ruby on Rails programmer with 10 years of experience, I believe that this video will be used as a demonstration of the power of Ruby on Rails!

[@GorailsTV]

I hope so! It's time that Rails becomes cool again!

[@mengyan3214]

Wow, it blows my mind. Need some time to digest. Thank you Chris.

[@okyerespencer3784]

Great video Chris. Please make another one but in this case the rails would serve as the backend and a react application would communicate with the backend. With all authentication implementation.

[@Norm7264]

Chris you surely are a master of the game!

[@taylorkoepp3048]

Outstanding tutorial, concise, clear and easy to follow.

[@GorailsTV]

Thanks! That means a lot!

[@gavranhas]

That was great! Thank you for such useful explanation.

[@anngel_eth]

Thanks a lot! It's easier than I thought it would be...❤

[@jaspermendiola7420]

will definitely check this

[@RiddlerSA]

Super useful video! 🔥 I just didn't include devise gem to my new project for the first time.

[@josbexerra8115]

Excelente mister chris. muchas gracias

[@elmedinador]

Thanks for the very concise and clear example of setting up a login system! It has been way too many years since I had to do it and needed the refresher. Do you also have videos explaining how to effectively test the log in flow and controllers requiring an authenticated user?

[@danlinar4410]

Thank you, it is a great update

[@excid3]

Agreed! Some wonderful quality of life improvements in Rails 7.1!

[@Oliver-ic8pi]

Awesome tutorial!! Some really nice new features too - what a great time to be a Rails developer. Thanks Chris :) Quick question if you get chance... do you see any advantages for using this over Devise? Obviously Devise is more established and is quicker to implement, but is this any more secure or is there a particular use case for building ourselves? Thanks again!

[@GorailsTV]

Definitely still recommend using Devise. It will get security updates and is battle tested. Your own custom auth will not be unless you hire a security team to audit your code.

[@uday4816]

Great tutorial. Do you have the code for it somewhere? Will be useful to go through it since the video was filled with new-to-me rails concepts

[@ashishgaur1398]

Hey Chris, thanks for the video. Would request you to please create videos on rspec and selenium. Thanks

[@holywalley]

Thanks for a great video. I missed one thing. How are those tokens one-time? You use it at least twice (to find user for edit and update actions). At which moment rails revokes them? Or is it only relies on ttl?

[@GorailsTV]

The content returned by the block is embedded in it. When the value changes the token is no longer valid.

[@20hair]

Thank you for the video, I was wondering why don't you use Devise for this?

[@GorailsTV]

We still recommend Devise so the community can provide you security updates. However you might need to build authentication from scratch if you need custom authentication.

[@20hair]

@@GorailsTV Understand, Thank you :)

[@archangel0137]

It's because he's trying to teach us how authentication works under the hood. It may also be beneficial to be able to build authentication systems yourself as well. Just out of interest, is there a way of deleting a specific Rails version?

[@eduardobenavidez7525]

Great video. Thank you Chris! What do you recommend for stateless authentication using Rails 7.1.x ? I'm looking for a JWT gem that works with the latest Rails

[@GorailsTV]

We did a pro episode on JWTs here gorails.com/episodes/jwt-authentication-from-scratch-with-rails

[@eduardobenavidez7525]

@@GorailsTV Ok, I'll check it out. Thanks!

[@giordanodiaz5047]

Great video, but I have a question: where the reset_session method comes from?

[@GorailsTV]

From Rails

[@lucasmedeiros9755]

that "generate token for" can be used for a rails api auth? like a jwt

[@GorailsTV]

You'd want to use something else so it can be revoked.

[@deepfuchsia7204]

hello frens I'm learning Rails and I heard about the gem called Devise, and the question is whether this autentication from scratch can replace Devise or I still should learn and use Devise? thanks

[@GorailsTV]

We recommend building it yourself to learn and then using devise for the automatic security updates

[@deepfuchsia7204]

@@GorailsTV thanks frend

[@LawrenceChege]

Very resourceful video! Can you do the same to authenticate multiple users with different roles using one login to access the system? Let me know if it's possible.

[@GorailsTV]

I would add roles to the User model (or AccountUser if a user can be part of multiple accounts).

[@mikopiko]

WOW