5 ms·
it's something someone would do who's never worked with authentication and authorization before and doesn't have the fallback of a professional tester (aka brea
by thisone 14y ago
it's something someone would do who's never worked with authentication and authorization before and doesn't have the fallback of a professional tester (aka breaker).
As people have mentioned, rails doesn't have it built in. I've used gems to provide it since I don't trust myself to write good enough security algorithms (and really, why reinvent the wheel if I don't have to).
In .net we can use the asp.net membership. But you've always got to have that authorization part, which I think can get forgotten about unless you've got a system under you belt or something/someone to crib from.
Sometimes you just don't think, and sometimes it becomes very public.
- sergiotapia 14y agoIn .NET you can protect controller action methods using `[Authorize]` data attribute above each method. You can even create your own custom filters. http://www.youtube.com/watch?v=BsxUsyMSGeA http://www.youtube.com/watch?v=BsxUsyMSGeA Just letting you know. :)
- thisone 14y agoindeed, aren't specifics, wonderful. However, I do think that authentication is where people may believe they can stop, forgetting or maybe not understanding, that authentication really doesn't do much, without an authorization system.