heartcombo/devise on Hacker News

…support that. I don’t happen to use VS Code, but I assume it has basic refactor, too. [0] Devise. https://github.com/heartcombo/devise/blob/main/lib/devise/co...

comment by t-writescode · 2026-05-29 · in We should be more tired than the model

…the literal code inside the devise codebase, which is a very standard Ruby auth system. See here: https://github.com/heartcombo/devise/blob/main/lib/devise/co... def self.define_helpers(mapping) #:nodoc: mapping = mapping.name class_eval…

comment by t-writescode · 2025-05-04 · in We fell out of love with Next.js and back in love with Ruby on Rails

…methods. My strong advice for anyone looking at Devise and perhaps feeling stumped is to open up https://github.com/heartcombo/devise/tree/main/app/controlle... and spend some tens of minutes looking at how the library does what it does.…

comment by peteforde · 2025-01-02 · in Rails for everything

…to JWTs. But if you want an existing example, Devise for Rails [1] has been around a while. [1] https://github.com/heartcombo/devise

comment by angoragoats · 2024-05-27 · in Should I use JWTs for authentication tokens?

…someone to do all that heavy lifting). Join the conversation if you have something valuable to add: https://github.com/heartcombo/devise/issues/5527

comment by evolve2k · 2023-04-23 · in Ask HN: Why is WebAuthn so slow to take off?

And for reference, the gold standard, Devise: https://github.com/heartcombo/devise

comment by benevol · 2023-01-08 · in Rails authentication from scratch

…https://turbo.hotwired.dev/handbook/introduction - Authorization and Authentication by Devise: https://github.com/heartcombo/devise HAML is wonderful as a templating language as well.

comment by compumike · 2022-12-04 · in Ask HN: Hunting for a Framework

…easy read. I recall it was very helpful without too much info when I was just getting started. https://github.com/heartcombo/devise/wiki/How-Tos .

comment by da4id · 2022-09-08 · in Ask HN: Best and Worst API Documentations?

…in Rails there's a popular auth package that includes password reset and recovery functionality: https://github.com/heartcombo/devise Always a pain to build, and not something these popular Node.js packages save you from doing over and…

comment by ivanmaeder · 2022-04-04 · in Ask HN: In 2022 how do you develop a simple CRUD app if you have few time?

…learning curve, but once you learn it you can add user authentication to your site pretty quickly. https://github.com/heartcombo/devise#getting-started

comment by MakerSam · 2022-02-04 · in Don't make me think, or why I switched to Rails from JavaScript SPAs

…For an example closer to my original point, see line 13 here: https://github.com/heartcombo/devise/blob/master/app/control...

comment by boffinism · 2021-05-17 · in Developers Who Use Spaces Make More Money Than Those Who Use Tabs (2017)

…designed for a codebase that matches to a single deployment so this is a bit of a workaround. [1] https://github.com/heartcombo/devise

comment by mawise · 2021-02-04 · in Show HN: Haven – Run a private website to share with only the people you choose

…you can build a solid modern web app in a fraction of the complexity of most systems today. 1 - https://github.com/plataformatec/devise 2 - https://github.com/plataformatec/simple_form 3 - https://github.com/mislav/will_paginate

comment by throwaway_x13zd · 2019-05-29 · in Choosing Ruby on Rails for web development project in 2019

Rails doesn't include Auth. Devise does a great job of it though - https://github.com/plataformatec/devise

comment by benbristow · 2019-02-10 · in Ruby in Twenty Minutes (2006)

…going in a couple hours, as long as they don't try to invent their own encryption scheme. [0]: https://github.com/plataformatec/devise [1]: https://docs.microsoft.com/en-us/aspnet/core/security/authen... [2]:…

comment by bpicolo · 2018-12-27 · in Ask HN: What do you use for authentication and authorization?

…an authentication plugin for Rails. Have a look at the instructions for setting up Devise on Rails: https://github.com/plataformatec/devise#getting-started You just add the dependency and boom, you instantly get a database migration for…

comment by Ajedi32 · 2018-08-28 · in Is Rails still relevant in 2018?

…but it feels miles behind where it should be at this point and I'm not really sure why. [1] - https://github.com/plataformatec/devise [2] - https://docs.djangoproject.com/en/2.1/releases/2.0/#mobile-f... [3] -…

comment by 0xADEADBEE · 2018-08-28 · in Is Rails still relevant in 2018?

…usually Devise[2]. What ‘etc’ includes is difficult to comment on :) [1] http://sinatrarb.com/ [2] https://github.com/plataformatec/devise

comment by robin_reala · 2018-06-10 · in Ask HN: Django or Rails?

…etc etc ... [0] https://www.jooq.org [1] https://spring.io/guides/gs/accessing-data-jpa/ [2] https://github.com/plataformatec/devise [3] http://openjdk.java.net/jeps/286 [4] http://www.jhipster.tech

comment by AlexAmee · 2018-01-27 · in Ask HN: Which language do you prefer for back end development?

Anything built with the popular rails gem devise allows 128 by default [1] https://github.com/plataformatec/devise/blob/88724e10adaf9ff...

comment by amichal · 2016-12-15 · in Yahoo discloses hack of 1B accounts

…The ideal example would be Rails devise[0] It just works without wasting too much time. [0] https://github.com/plataformatec/devise

comment by ohgh1ieD · 2016-07-15 · in Ask HN: Web framework, written in a typed language, auth out of the box?

…for no real gain. The devise source contains some great examples of metaprogramming used properly: https://github.com/plataformatec/devise/blob/master/lib/devi...

comment by seivadmas · 2015-10-18 · in The Dynamic Def – abusing Ruby's def statement

…They explained their bcrypt implementation awkwardly, though. This is what their code did: https://github.com/plataformatec/devise/blob/1a0192201b317d3... I would not have advised them to go the pepper route, but it's probably a moot point…

comment by sarciszewski · 2015-08-03 · in PagerDuty hacked. And finally comes clean 21 days later

Interestingly, if I search for that on DDG, I get a github.com/plataformatec/devise as third result. Without more context, I don't think that's particularly bad. Adding "ruby" to the query bumps that link to the top.

comment by Zash · 2015-06-17 · in DuckDuckGo on CNBC: We’ve grown 600% since NSA surveillance news broke

…For subscriptions there are some good stripe gems. https://github.com/thefrontside/stripe-rails https://github.com/plataformatec/devise

comment by smileysteve · 2015-06-12 · in Ask HN: Which tools do you use for SaaS customer management?

…seem to find anymore :( The cached-bundle script is inspired and based off the one from devise: https://github.com/plataformatec/devise/blob/master/script/c...

comment by tonyhburns · 2015-05-01 · in Uploading to S3 in 18 lines of Shell

That makes sense, normally Devise handles that for me https://github.com/plataformatec/devise

comment by sytse · 2015-02-16 · in Life in a post-database world: Using crypto to avoid database writes

…language. Wouldn't a question on stackoverflow be better? (Afaik most Rails projects use https://github.com/plataformatec/devise/ which takes care of database setup, password hashes, session cookies, even forgot-password feature and…

comment by mtmail · 2014-09-30 · in Ask HN: Authentication with Angular/Rails?

…relies on warden underneath and serializes the user into the session without any sort of expiry ( https://github.com/plataformatec/devise/blob/master/lib/devi... ). There are a lot of options for remediation, though, like overriding the…

comment by bhahn · 2013-10-14 · in Logout is broken by default in Ruby on Rails Web applications

▲ 1

Devise - Flexible authentication solution for Rails with Warden

story by gklein · 2013-08-10 · 0 comments

…couple open issues related to Rails 4. edit: formatting [1]: https://github.com/ryanb/cancan/ [2]: https://github.com/plataformatec/devise/ [3]: https://github.com/FriendlyId/friendly_id [4]: https://github.com/mbleigh/acts-as-taggable-on

comment by ilikepi · 2013-06-17 · in If Your Business Uses Rails 2.3 You Need To Move To A Supported Option ASAP

…like Devise. Looking at the source it looks like the token is pulled right off the params: https://github.com/plataformatec/devise/blob/master/app/cont... The reset routine uses Rails finder mechanism to do just what the OP discusses:…

comment by robconery · 2013-02-06 · in MySQL madness and Rails (+possible exploit)

…Asking this since it's probably the most widely used authentication gem in Rails etc... [1] https://github.com/plataformatec/devise

comment by thibaut_barrere · 2013-01-09 · in Password Hijacking Security Incident and Response

…There are also other great Ruby gems/Rails projects that do Authentication ( https://github.com/plataformatec/devise ) , E-commerce ( https://github.com/spree/spree ), etc! That's why I love the Ruby community.

comment by mion · 2012-12-25 · in Where can one learn best practices to design application components?

…the gem, run two rails commands, and you're basically done except for customizing the views. [1]: https://github.com/plataformatec/devise

comment by zrail · 2012-08-31 · in Surprise: People hate being forced to use Facebook

…Django has basic user authentication built-in, Ruby on Rails has Devise - https://github.com/plataformatec/devise and AuthLogic - https://github.com/binarylogic/authlogic . I'd recommend reading the Ruby on Rails security guide abou

comment by chucknibbleston · 2012-05-28 · in OAuth & One-Page Apps: Avoiding the Redirect

▲ 3

An appropriate response to an inappropriate bug report

story by mmahemoff · 2012-05-17 · 0 comments

…are others too, but I mention these two because they are popular and sufficient for most people. - https://github.com/plataformatec/devise and https://github.com/intridea/omniauth For Django, there is Pinax Project -…

comment by SingAlong · 2012-03-05 · in Ask HN: Any good open-source user management libs for web apps?

…) and Tokamak ( http://rubydoc.info/gems/tokamak/1.2.1/frames ) are super useful. 3. Devise ( https://github.com/plataformatec/devise ) features an auth_key based authentication making it really easy to give our API access to your users…

comment by prateekdayal · 2011-12-01 · in Creating an API

I'm using the devise plugin for rails which seemed to be the most popular choice at the time. ( https://github.com/plataformatec/devise ) I've pretty much just gone for the default settings, which I'm guessing must include a limit on the…

comment by davesmylie · 2011-09-22 · in Show HN: Check out my (sort of) weekend project...

…try to understand the libraries you're using instead of arbitrarily picking packages. Devise ( https://github.com/plataformatec/devise ) is a great example of that as they explicitly tell people not to use it unless they have a good…

comment by thmzlt · 2011-09-18 · in Ask HN: best language for hiring?

If you're not already, use Devise. https://github.com/plataformatec/devise It's ballin'. Bcrypt by default, too.

comment by getsat · 2011-09-09 · in Show HN: Bitcoinica - Advanced Bitcoin Trading Platform

We use the Devise gem https://github.com/plataformatec/devise and the default subject line is: "Confirmation instructions". I can't say anyone on our team thought to change it. Good clear language like "Please confirm your email address"…

comment by sudonim · 2011-08-19 · in Please confirm your email address

…library for rails that uses bcrypt by default, and to have a custom value to speed up unit tests: https://github.com/plataformatec/devise/wiki/Speed-up-your-u... config.stretches = Rails.env.test? ? 1 : 10

comment by benatkin · 2011-06-26 · in MtGox salted passwords cracked

…password to use your new work factor on their next login. You could do something similar. [1] https://github.com/plataformatec/devise

comment by getsat · 2011-06-23 · in The FBI stole an Instapaper server in an unrelated raid

…one of the following: http://github.com/thoughtbot/clearance http://github.com/binarylogic/authlogic http://github.com/plataformatec/devise

comment by doctorzaius · 2010-05-05 · in Rate my tiny web app: my-foc.us