Episodes
Magic Links
Play
19:25

Magic Links

#371 Oct 16, 2022 pro
Magic Links is a passwordless authentication method where you receive a emailed link to proceed with signing in. In this episode, we look at swapping out a lot of the core functionalities of Devise with Magic Links as well as alternatives for using this methodology without Devise.

Secure User Passwords
Play
8:26

Secure User Passwords

#349 May 15, 2022 pro
We have a look at integrating the HaveIBeenPwned service with Devise so that our users will some awareness of their password being potentially compromised.

Authentication with Sorcery
Play
15:23

Authentication with Sorcery

#321 Oct 31, 2021 pro
Sorcery is a stripped-down, bare-bones authentication library, with which you can write your own authentication flow. In this episode we look at creating the controllers and views for a simple authentication solution.

Reset Password from Scratch
Play
24:24

Reset Password from Scratch

#316 Sep 26, 2021 pro
Continuing from Episode 300, we look at creating a password reset feature. We explore some of the security concerns around this feature and some mitigating options.

Hardware Security Keys
Play
11:02

Hardware Security Keys

#302 Jun 27, 2021 pro
Using a hardware security key for multi-factor authentication is a great way to protect user accounts. In this episode, we look at implementing security keys into our Ruby on Rails applications with Devise user accounts.