heartcombo/devise

Features

• User Authentication Systems - Handle user sign-up, sign-in, session management, and account recovery through a complete authentication system.
• Rails Authentication Frameworks - Provides a complete authentication system for Ruby on Rails applications including sign-up, sign-in, and session persistence.
• Authenticated User Retrieval - Verify if a user is currently authenticated and retrieve the active user object using built-in helper methods.
• Multi-Model Authentication - Allows the configuration of multiple distinct user models with independent routes and access controls.
• Controller Filters - Verifies that a user is authenticated before allowing access to specific controller actions.
• Controller Filters - Uses controller-level callbacks to intercept requests and verify authentication status before executing the target action.
• Multi-Model Authentication - Create separate authentication systems for different user types with independent routes and controllers to isolate permissions.
• Request Authentication Middleware - Delegates the core authentication and session management to a low-level Rack middleware layer for decoupled request handling.
• Request Parameter Sanitization - Uses a configurable permit system to white-list request attributes before they are passed to model update methods.
• Role-Based Access Control - Sets up independent authentication systems for different user types with distinct routes and permission levels.
• Session Authentication - Integrates with Warden middleware to manage secure user sessions and security across various request types.
• Third-Party Authentication Providers - Integrates with external identity providers and social login services using standardized interfaces.
• User Account Management - Handles password resets, account confirmations, and profile updates to maintain secure user identities.
• User Identity Management - Manages user registration, sign-in, password recovery, and account confirmation.
• Authentication Frameworks - Functions as a complete authentication framework for managing user identity and sessions in web applications.
• API Authentication - Secures API endpoints by requiring HTTP Basic Authentication for every incoming request.
• Authentication Model Settings - Set encryption costs, timeout durations, and lockout periods for different user types to balance security and accessibility.
• Parameter Filtering - Allows definition of permitted form attributes during account updates and sign-up to ensure data security.
• Basic Authentication - Implements standard HTTP basic authentication to secure API endpoints.
• Basic Authentication Providers - Provides a solution for securing API-driven applications via the HTTP Basic Authentication standard.
• Authentication Logic Overrides - Override default controller actions to inject custom business logic or trigger background events during the login process.
• Basic Authentication - Authenticate users on every request using the HTTP Basic Authentication standard for API-driven applications.
• User Role Management - Create separate authentication systems for different roles with distinct routes and logic to manage access levels.
• Mass Assignment Prevention - Restricts input fields during sign-in and updates to prevent mass-assignment vulnerabilities.
• Customizable Authentication Paths - Define custom URL paths and names for sign-in and sign-out actions to control how users access account pages.
• Authentication Namespacing - Separates different user models into distinct authentication namespaces with their own session keys and access controls.
• Module Mixins - Includes specific authentication behaviors like lockable or recoverable into models via mixins to enable optional functionality.
• Controller-Based Routing - Maps specific authentication actions to dedicated controllers that handle the logic for sign-in, sign-up, and password recovery.
• Custom Authentication Interfaces - Provides the ability to override pre-built authentication UI components with custom frontend views.
• Identity Provider Integration - Connect to third-party identity providers using a standardized interface to enable social login.
• Authentication and Authorization - Provides comprehensive authentication.
• User Interface Components - Authentication solution for Ruby on Rails applications.
• Authentication and OAuth - A flexible authentication solution based on Warden.

Star history