Home - verachell/Simple-rails-tryout-app-using-devise GitHub Wiki

Welcome to the Simple-rails-tryout-app-using-devise wiki!

In this wiki you will find every step described for creating the simple rails app here with authentication via devise. Devise has many more options and many more different ways to configure than just those which are shown here. The features explored here are the ones which interested me personally; your use case and needs may be different.

This app uses sqlite and is in the development environment. This is not a production-ready rails app!

Overall aims and features of this app

• A basic homepage that doesn't really do anything and whose content remains identical at all times whether the user is logged in or not. localhost:3000

• 1 page whose URL may be widely known but whose content may only be accessed by a logged-in user (e.g. user dashboard) localhost:3000/mydashboard

• 1 very secret page whose URL is not desired to be widely known outside of the organization and therefore returns a 404 unless accessed by a logged in user (e.g. unpublished blog posts that you don't want outsiders to know are even upcoming. Or a status page that gives devs info about the app, or anything else you want to tell search engines "nothing to see here" as opposed to insufficient permissions) localhost:3000/nothing-to-see-here

• 1 page which can be accessed by anyone but which displays additional or different content when accessed by a logged-in user localhost:3000/mixed-content

• Set up timeoutable so that a logged-in user is automatically logged out after x time of inactivity

• Finally, set up lockable to have account lockout time after password fails, to help prevent brute force attacks