Drifting Ruby

Authentication Crash Course with Devise

#45 Sep 5, 2016 free

Devise is a flexible authentication solution for Rails based on Warden. Learn how to add a stable authentication solution like Devise to your application.

rails security authentication

Client Side Encryption

#63 Jan 15, 2017 free

Add an extra level of security to your application with client side encryption. Even over an SSL connection, there are attacks which could expose your users' sensitive information. Using JSEncrypt, learn how to encrypt on the client side and decrypt on the server side.

rails security javascript encryption

Security and Static Code Analyzers

#62 Jan 8, 2017 free

Whether you're preparing for a third-party security scan or already doing peer code reviews, you should always run brakeman scanner on your application to identify potential security vulnerabilities.

rails security

Invisible Captcha

#10 Aug 2, 2015 free

Part of a good User Experience is making your application easy to use for your users. However, a few bad apples often cause a hinderance to your UX/UI by the addition of Captchas. Learn how to create invisible captchas to protect your forms while delivering a good UX.

rails form security

Session Hijacking

#400 May 7, 2023 free

In this episode, we explore session hijacking and an approach that we can take to limit the risk. There are some user experience and functionality caveats to this approach so they must be taken into consideration as well.

rails security

Securing File Uploads

#14 Aug 22, 2015 free

Be default, Refile does not have a way to secure file downloads. It relies on a generated hash that is unknown to users unless the page renders that image or has a download to that file. This is okay sometimes, however, protecting the file from being downloaded for those who have the URL is a bit more involved.

rails security uploads

Complex Strong Parameters

#16 Aug 28, 2015 free

Make your strong parameters do more by extracting the logic in order to maximize the ability and security of your application.

rails security parameters

Dynamic Role Management

#247 Jun 21, 2020 pro

Create dynamic roles that can be assigned to users. Based on the assigned role, the user will be able to perform or view various parts of the application.

model rails security

Friend Requests From Scratch

#155 Oct 14, 2018 pro

Part I - In this episode, we create our authentication for users, default view for authenticated users, friendship model, associations and scopes for our social media application.

rails model security series - social media

Policy Manager with GDPR Rails

#164 Dec 16, 2018 pro

Using the gdpr_rails gem, we look at adding a policy manager to require users to accept age, terms, and privacy policies before signing up for an account.

rails security

View

Episodes

Sort

Tags

Authentication Crash Course with Devise

Client Side Encryption

Security and Static Code Analyzers

Invisible Captcha

Session Hijacking

Securing File Uploads

Complex Strong Parameters

Dynamic Role Management

Friend Requests From Scratch

Policy Manager with GDPR Rails

Learning Paths

Video Logs new

Blog

Merchandise

Forums new

View

Episodes

Sort

Tags

Authentication Crash Course with Devise

Client Side Encryption

Security and Static Code Analyzers

Invisible Captcha

Session Hijacking

Securing File Uploads

Complex Strong Parameters

Dynamic Role Management

Friend Requests From Scratch

Policy Manager with GDPR Rails