heartcombo/devise
Devise
Devise is a flexible authentication framework for Ruby on Rails applications. It serves as a user identity management system that handles registration, sign-in, password recovery, and account confirmation. The system integrates with the Warden middleware to manage user sessions and security across various request types.
The framework functions as a multi-model authentication engine, allowing for the configuration of multiple distinct user models with independent routes and access controls. It also provides a standardized interface to connect with external identity providers and third-party login services.
Additional capabilities include support for HTTP Basic Authentication to secure API endpoints and tools for multi-role access control. The project also covers user account management, including the localization of authentication messages and the sanitization of request parameters to prevent mass-assignment vulnerabilities.
Features
- User Authentication Systems - Handle user sign-up, sign-in, session management, and account recovery through a complete authentication system.
- Rails Authentication Frameworks - Provides a complete authentication system for Ruby on Rails applications including sign-up, sign-in, and session persistence.
- Authenticated User Retrieval - Verify if a user is currently authenticated and retrieve the active user object using built-in helper methods.
- Multi-Model Authentication - Allows the configuration of multiple distinct user models with independent routes and access controls.
- Controller Filters - Verifies that a user is authenticated before allowing access to specific controller actions.
- Controller Filters - Uses controller-level callbacks to intercept requests and verify authentication status before executing the target action.
- Multi-Model Authentication - Create separate authentication systems for different user types with independent routes and controllers to isolate permissions.
- Request Authentication Middleware - Delegates the core authentication and session management to a low-level Rack middleware layer for decoupled request handling.
- Request Parameter Sanitization - Uses a configurable permit system to white-list request attributes before they are passed to model update methods.
- Role-Based Access Control - Sets up independent authentication systems for different user types with distinct routes and permission levels.
- Session Authentication - Integrates with Warden middleware to manage secure user sessions and security across various request types.
- Third-Party Authentication Providers - Integrates with external identity providers and social login services using standardized interfaces.
- User Account Management - Handles password resets, account confirmations, and profile updates to maintain secure user identities.
- User Identity Management - Manages user registration, sign-in, password recovery, and account confirmation.
- Authentication Frameworks - Functions as a complete authentication framework for managing user identity and sessions in web applications.
- API Authentication - Secures API endpoints by requiring HTTP Basic Authentication for every incoming request.
- Authentication Model Settings - Set encryption costs, timeout durations, and lockout periods for different user types to balance security and accessibility.
- Parameter Filtering - Allows definition of permitted form attributes during account updates and sign-up to ensure data security.
- Basic Authentication - Implements standard HTTP basic authentication to secure API endpoints.
- Basic Authentication Providers - Provides a solution for securing API-driven applications via the HTTP Basic Authentication standard.
- Authentication Logic Overrides - Override default controller actions to inject custom business logic or trigger background events during the login process.
- Basic Authentication - Authenticate users on every request using the HTTP Basic Authentication standard for API-driven applications.
- User Role Management - Create separate authentication systems for different roles with distinct routes and logic to manage access levels.
- Mass Assignment Prevention - Restricts input fields during sign-in and updates to prevent mass-assignment vulnerabilities.
- Customizable Authentication Paths - Define custom URL paths and names for sign-in and sign-out actions to control how users access account pages.
- Authentication Namespacing - Separates different user models into distinct authentication namespaces with their own session keys and access controls.
- Module Mixins - Includes specific authentication behaviors like lockable or recoverable into models via mixins to enable optional functionality.
- Controller-Based Routing - Maps specific authentication actions to dedicated controllers that handle the logic for sign-in, sign-up, and password recovery.
- Custom Authentication Interfaces - Provides the ability to override pre-built authentication UI components with custom frontend views.
- Identity Provider Integration - Connect to third-party identity providers using a standardized interface to enable social login.
- Authentication and Authorization - Provides comprehensive authentication.
- User Interface Components - Authentication solution for Ruby on Rails applications.
- Authentication and OAuth - A flexible authentication solution based on Warden.
