Software engineering and personal development

Tag: security

Invalidate session after logout with Devise gem

Img source: interexchange.org

Devise is one of the most famous Ruby gems, which is a flexible authentication solution for Rails based on Warden. It comes with a lot of useful features, but it also has its limitations. One of them is that it does not invalidate a session even though you log out. One of the core developers behind Devise accepts it, and gives the advice of replacing cookie-based storage to address this issue. Fortunately, there is a quicker solution as well. Continue reading

Inform your users about breached passwords using Pwned Passwords API

Img source: dev.to

Passwords one of the most frequent ways that we use to access our digital accounts. Having secure passwords is really crucial, and represents one of the most important aspects that we need to pay attention to. As developers, we also need to make sure that we provide our services with a high level of security. Last year 2017 NIST (National Institute of Standards and Technology) recommended to check user passwords against existing public breaches of data, and fortunately, there exists an API that allows you to do that really easily. Continue reading

© 2024 Fatos Morina

Theme by Anders NorenUp ↑