heartcombo/devise
View on GitHub ↗ ★ 24,355 Ruby
Flexible authentication solution for Rails with Warden.
46 mentions on Hacker News by 44 people: 2 stories, 44 comments · first 2010-05-05 · latest 2026-05-29
20082026
-
…support that. I don’t happen to use VS Code, but I assume it has basic refactor, too. [0] Devise. https://github.com/heartcombo/devise/blob/main/lib/devise/co...
comment by t-writescode · 2026-05-29 · in We should be more tired than the model -
…the literal code inside the devise codebase, which is a very standard Ruby auth system. See here: https://github.com/heartcombo/devise/blob/main/lib/devise/co... def self.define_helpers(mapping) #:nodoc: mapping = mapping.name class_eval…
comment by t-writescode · 2025-05-04 · in We fell out of love with Next.js and back in love with Ruby on Rails -
…methods. My strong advice for anyone looking at Devise and perhaps feeling stumped is to open up https://github.com/heartcombo/devise/tree/main/app/controlle... and spend some tens of minutes looking at how the library does what it does.…
comment by peteforde · 2025-01-02 · in Rails for everything -
…to JWTs. But if you want an existing example, Devise for Rails [1] has been around a while. [1] https://github.com/heartcombo/devise
comment by angoragoats · 2024-05-27 · in Should I use JWTs for authentication tokens? -
…someone to do all that heavy lifting). Join the conversation if you have something valuable to add: https://github.com/heartcombo/devise/issues/5527
comment by evolve2k · 2023-04-23 · in Ask HN: Why is WebAuthn so slow to take off? -
And for reference, the gold standard, Devise: https://github.com/heartcombo/devise
comment by benevol · 2023-01-08 · in Rails authentication from scratch -
…https://turbo.hotwired.dev/handbook/introduction - Authorization and Authentication by Devise: https://github.com/heartcombo/devise HAML is wonderful as a templating language as well.
comment by compumike · 2022-12-04 · in Ask HN: Hunting for a Framework -
…easy read. I recall it was very helpful without too much info when I was just getting started. https://github.com/heartcombo/devise/wiki/How-Tos .
comment by da4id · 2022-09-08 · in Ask HN: Best and Worst API Documentations? -
…in Rails there's a popular auth package that includes password reset and recovery functionality: https://github.com/heartcombo/devise Always a pain to build, and not something these popular Node.js packages save you from doing over and…
comment by ivanmaeder · 2022-04-04 · in Ask HN: In 2022 how do you develop a simple CRUD app if you have few time? -
…learning curve, but once you learn it you can add user authentication to your site pretty quickly. https://github.com/heartcombo/devise#getting-started
comment by MakerSam · 2022-02-04 · in Don't make me think, or why I switched to Rails from JavaScript SPAs -
…For an example closer to my original point, see line 13 here: https://github.com/heartcombo/devise/blob/master/app/control...
comment by boffinism · 2021-05-17 · in Developers Who Use Spaces Make More Money Than Those Who Use Tabs (2017) -
…designed for a codebase that matches to a single deployment so this is a bit of a workaround. [1] https://github.com/heartcombo/devise
comment by mawise · 2021-02-04 · in Show HN: Haven – Run a private website to share with only the people you choose -
…you can build a solid modern web app in a fraction of the complexity of most systems today. 1 - https://github.com/plataformatec/devise 2 - https://github.com/plataformatec/simple_form 3 - https://github.com/mislav/will_paginate
comment by throwaway_x13zd · 2019-05-29 · in Choosing Ruby on Rails for web development project in 2019 -
Rails doesn't include Auth. Devise does a great job of it though - https://github.com/plataformatec/devise
comment by benbristow · 2019-02-10 · in Ruby in Twenty Minutes (2006) -
…going in a couple hours, as long as they don't try to invent their own encryption scheme. [0]: https://github.com/plataformatec/devise [1]: https://docs.microsoft.com/en-us/aspnet/core/security/authen... [2]:…
comment by bpicolo · 2018-12-27 · in Ask HN: What do you use for authentication and authorization? -
…an authentication plugin for Rails. Have a look at the instructions for setting up Devise on Rails: https://github.com/plataformatec/devise#getting-started You just add the dependency and boom, you instantly get a database migration for…
comment by Ajedi32 · 2018-08-28 · in Is Rails still relevant in 2018? -
…but it feels miles behind where it should be at this point and I'm not really sure why. [1] - https://github.com/plataformatec/devise [2] - https://docs.djangoproject.com/en/2.1/releases/2.0/#mobile-f... [3] -…
comment by 0xADEADBEE · 2018-08-28 · in Is Rails still relevant in 2018? -
…usually Devise[2]. What ‘etc’ includes is difficult to comment on :) [1] http://sinatrarb.com/ [2] https://github.com/plataformatec/devise
comment by robin_reala · 2018-06-10 · in Ask HN: Django or Rails? -
…etc etc ... [0] https://www.jooq.org [1] https://spring.io/guides/gs/accessing-data-jpa/ [2] https://github.com/plataformatec/devise [3] http://openjdk.java.net/jeps/286 [4] http://www.jhipster.tech
comment by AlexAmee · 2018-01-27 · in Ask HN: Which language do you prefer for back end development? -
Anything built with the popular rails gem devise allows 128 by default [1] https://github.com/plataformatec/devise/blob/88724e10adaf9ff...
comment by amichal · 2016-12-15 · in Yahoo discloses hack of 1B accounts -
…The ideal example would be Rails devise[0] It just works without wasting too much time. [0] https://github.com/plataformatec/devise
comment by ohgh1ieD · 2016-07-15 · in Ask HN: Web framework, written in a typed language, auth out of the box? -
…for no real gain. The devise source contains some great examples of metaprogramming used properly: https://github.com/plataformatec/devise/blob/master/lib/devi...
comment by seivadmas · 2015-10-18 · in The Dynamic Def – abusing Ruby's def statement -
…They explained their bcrypt implementation awkwardly, though. This is what their code did: https://github.com/plataformatec/devise/blob/1a0192201b317d3... I would not have advised them to go the pepper route, but it's probably a moot point…
comment by sarciszewski · 2015-08-03 · in PagerDuty hacked. And finally comes clean 21 days later -
Interestingly, if I search for that on DDG, I get a github.com/plataformatec/devise as third result. Without more context, I don't think that's particularly bad. Adding "ruby" to the query bumps that link to the top.
comment by Zash · 2015-06-17 · in DuckDuckGo on CNBC: We’ve grown 600% since NSA surveillance news broke -
…For subscriptions there are some good stripe gems. https://github.com/thefrontside/stripe-rails https://github.com/plataformatec/devise
comment by smileysteve · 2015-06-12 · in Ask HN: Which tools do you use for SaaS customer management? -
…seem to find anymore :( The cached-bundle script is inspired and based off the one from devise: https://github.com/plataformatec/devise/blob/master/script/c...
comment by tonyhburns · 2015-05-01 · in Uploading to S3 in 18 lines of Shell -
That makes sense, normally Devise handles that for me https://github.com/plataformatec/devise
comment by sytse · 2015-02-16 · in Life in a post-database world: Using crypto to avoid database writes -
…language. Wouldn't a question on stackoverflow be better? (Afaik most Rails projects use https://github.com/plataformatec/devise/ which takes care of database setup, password hashes, session cookies, even forgot-password feature and…
comment by mtmail · 2014-09-30 · in Ask HN: Authentication with Angular/Rails? -
…relies on warden underneath and serializes the user into the session without any sort of expiry ( https://github.com/plataformatec/devise/blob/master/lib/devi... ). There are a lot of options for remediation, though, like overriding the…
comment by bhahn · 2013-10-14 · in Logout is broken by default in Ruby on Rails Web applications -
…couple open issues related to Rails 4. edit: formatting [1]: https://github.com/ryanb/cancan/ [2]: https://github.com/plataformatec/devise/ [3]: https://github.com/FriendlyId/friendly_id [4]: https://github.com/mbleigh/acts-as-taggable-on
comment by ilikepi · 2013-06-17 · in If Your Business Uses Rails 2.3 You Need To Move To A Supported Option ASAP -
…like Devise. Looking at the source it looks like the token is pulled right off the params: https://github.com/plataformatec/devise/blob/master/app/cont... The reset routine uses Rails finder mechanism to do just what the OP discusses:…
comment by robconery · 2013-02-06 · in MySQL madness and Rails (+possible exploit) -
…Asking this since it's probably the most widely used authentication gem in Rails etc... [1] https://github.com/plataformatec/devise
comment by thibaut_barrere · 2013-01-09 · in Password Hijacking Security Incident and Response -
…There are also other great Ruby gems/Rails projects that do Authentication ( https://github.com/plataformatec/devise ) , E-commerce ( https://github.com/spree/spree ), etc! That's why I love the Ruby community.
comment by mion · 2012-12-25 · in Where can one learn best practices to design application components? -
…the gem, run two rails commands, and you're basically done except for customizing the views. [1]: https://github.com/plataformatec/devise
comment by zrail · 2012-08-31 · in Surprise: People hate being forced to use Facebook -
…Django has basic user authentication built-in, Ruby on Rails has Devise - https://github.com/plataformatec/devise and AuthLogic - https://github.com/binarylogic/authlogic . I'd recommend reading the Ruby on Rails security guide abou
comment by chucknibbleston · 2012-05-28 · in OAuth & One-Page Apps: Avoiding the Redirect -
…are others too, but I mention these two because they are popular and sufficient for most people. - https://github.com/plataformatec/devise and https://github.com/intridea/omniauth For Django, there is Pinax Project -…
comment by SingAlong · 2012-03-05 · in Ask HN: Any good open-source user management libs for web apps? -
…) and Tokamak ( http://rubydoc.info/gems/tokamak/1.2.1/frames ) are super useful. 3. Devise ( https://github.com/plataformatec/devise ) features an auth_key based authentication making it really easy to give our API access to your users…
comment by prateekdayal · 2011-12-01 · in Creating an API -
I'm using the devise plugin for rails which seemed to be the most popular choice at the time. ( https://github.com/plataformatec/devise ) I've pretty much just gone for the default settings, which I'm guessing must include a limit on the…
comment by davesmylie · 2011-09-22 · in Show HN: Check out my (sort of) weekend project... -
…try to understand the libraries you're using instead of arbitrarily picking packages. Devise ( https://github.com/plataformatec/devise ) is a great example of that as they explicitly tell people not to use it unless they have a good…
comment by thmzlt · 2011-09-18 · in Ask HN: best language for hiring? -
If you're not already, use Devise. https://github.com/plataformatec/devise It's ballin'. Bcrypt by default, too.
comment by getsat · 2011-09-09 · in Show HN: Bitcoinica - Advanced Bitcoin Trading Platform -
We use the Devise gem https://github.com/plataformatec/devise and the default subject line is: "Confirmation instructions". I can't say anyone on our team thought to change it. Good clear language like "Please confirm your email address"…
comment by sudonim · 2011-08-19 · in Please confirm your email address -
…library for rails that uses bcrypt by default, and to have a custom value to speed up unit tests: https://github.com/plataformatec/devise/wiki/Speed-up-your-u... config.stretches = Rails.env.test? ? 1 : 10
comment by benatkin · 2011-06-26 · in MtGox salted passwords cracked -
…password to use your new work factor on their next login. You could do something similar. [1] https://github.com/plataformatec/devise
comment by getsat · 2011-06-23 · in The FBI stole an Instapaper server in an unrelated raid -
…one of the following: http://github.com/thoughtbot/clearance http://github.com/binarylogic/authlogic http://github.com/plataformatec/devise
comment by doctorzaius · 2010-05-05 · in Rate my tiny web app: my-foc.us