AuthenticatedApp

This is a mountable Rails Engine that provides basic authentication and session management.

WARNING

• The password reset mechanism can be used to determine the recovery emails of users, particularly if email only option is set. There should be a rate limit or puzzle. (although, reset by email does not work with the 'email' column of a user, only the recovery_email column)

TODO

• Better define requirements
• Add option to re-enable a user when the user successfully logs in.
• Add options for flash, etc.

Requirements

• haml gem
• User class
• Bootstrap 5
• HAML

Installation

Add this line to your application's Gemfile:

gem 'authenticated_app'

Configuration

config/initializers/authenticated_app.rb

AuthenticatedApp.configure do |config|
  config.home_url = :home_url  # home for authenticated users
  config.root_url = :root_url  # home for unauthenticated users
  config.email_only = false    # if true, use email for login.
  config.default_domain = 'example.org'
end

Integration

class ApplicationController < ActionController::Base
  include AuthenticatedAppConcern
end

In routes.rb:

mount AuthenticatedApp::Engine => "/auth"