One option worth considering today is to roll your own. Rails has much of the basic building blocks for authentication built directly into the framework now, and Rails 8 will ship with a set of generators that does a decent job of giving you the scaffolding code right there in your app where you can easily reason about it and modify it to suit your needs. You can get access to those generators today from Rails main. https://www.bigbinary.com/blog/rails-8-introduces-a-basic-authentication-generator

I personally prefer the directness and flexibility of having my authentication code alongside the rest of my code over the indirection of it being loaded from a gem where it’s harder to reason about and more difficult to override/modify behaviour. The downside of course is you are now more directly responsible for ensuring your code is safe and secure.

The generated code approach is actually what José Valim, the original creator of Devise, now recommends auth-in-a-box approach of libraries like devise (https://dashbit.co/blog/a-new-authentication-solution-for-phoenix) and I believe they now have generators as part of the Phoenix framework. 

Tekin

On 18 Aug 2024, at 3:00 PM, DAZ <daz4...@gmail.com> wrote:

Devise seems to be the go to gem for auth, but has anyone found any others that are worth trying?

Rob mentioned Clearance at the talk on Thursday, but I thought he also said it might be being sunsetted as well.

Are there any others that people have used?

--
You received this message because you are subscribed to the Google Groups "North West Ruby User Group (NWRUG)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nwrug-members+unsubscr...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/nwrug-members/66555abd-7ca8-40d5-9da1-f4fb89864ad6n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "North West Ruby User Group (NWRUG)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nwrug-members+unsubscr...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/nwrug-members/C633FFA4-6A5D-4EE5-8B21-C40C79FADC40%40tekin.co.uk.

Reply via email to