Ruby on Rails Screencasts

Episode #356 – Jun 08, 2012 – 82 comments

Dangers of Session Hijacking

If a user's authentication cookie is sent over an insecure connection it is vulnerable to session hijacking, or more specifically, sidejacking. Learn how this is done, and how you can prevent it. (6 minutes)

Watch Episode Read Episode

Episode #360 – Jun 25, 2012 – 196 comments

Facebook Authentication

This will show how to create a new facebook application and configure it. Then add some authentication with the omniauth-facebook gem and top it off with a client-side authentication using the JavaScript SDK. (12 minutes)

Watch Episode Read Episode

Episode #119 – Jul 21, 2008 – 63 comments

Session Based Model

If you have a lot of logic associated with the data inside a session, you'll need some central location to put this logic. See how to create a session based model in this episode. (13 minutes)

Watch Episode

Episode #393 – Nov 21, 2012 – 101 comments

Guest User Record

Instead of presenting a sign up form to the user, consider creating a temporary guest record so the user can try out the application without filling in their information up front. They can then become a permanent member afterwards. (9 minutes)

Watch Episode Read Episode

Episode #274 – Jul 11, 2011 – 167 comments

Remember Me & Reset Password

It is easy to create authentication from scratch, but how do we extend it with more features? Here I add a "remember me" check box and a "forgotten password" link. (12 minutes)

Watch Episode Read Episode

Episode #346 – May 03, 2012 – 84 comments

Wizard Forms with Wicked

Creating a wizard form can be tricky in Rails. Learn how Wicked can help by turning a controller into a series of multiple steps. (11 minutes)

Watch Episode Read Episode

Episode #84 – Dec 16, 2007 – 38 comments

Cookie Based Session Store

In Rails 1.2 the default session store is file based. This is inefficient and difficult to maintain. In Rails 2.0 the default is now cookie based which has several benefits as you will see in this episode. (4 minutes)

Watch Episode

Episode #270 – Jun 13, 2011 – 138 comments

Authentication in Rails 3.1

Here I show off three new features in Rails 3.1 that will help with authentication: easier HTTP Basic, SecurePassword in the database, and forcing SSL. (7 minutes)

Watch Episode Read Episode