In Rails 7.1, we're going to get a new feature that will allow us to generate tokens for attributes. With generates_token_for, a token can embed data from a record. When using the token to fetch the record, the data from the token and the data from the record will be compared.

Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. In this episode, we'll look at implementing this a few different ways and resolving some issues with Turbo.

We have a look at integrating the HaveIBeenPwned service with Devise so that our users will some awareness of their password being potentially compromised.

Sorcery is a stripped-down, bare-bones authentication library, with which you can write your own authentication flow. In this episode we look at creating the controllers and views for a simple authentication solution.

Continuing from Episode 300, we look at creating a password reset feature. We explore some of the security concerns around this feature and some mitigating options.