thoughtbot/clearance

Features

• User Identity Verification - Verifies user identities by checking provided email and password credentials against encrypted database storage.
• Rails Authentication Frameworks - Provides a complete authentication framework for Ruby on Rails, including account management and encrypted password storage.
• Rails Authentication Frameworks - Implements a complete authentication framework specifically designed for the Ruby on Rails ecosystem.
• REST Endpoint Protections - Restricts access to specific API endpoints and application resources through identity verification.
• New Relic - Provides the capability to register new users by collecting email and password information.
• Credential Format Validation - Validates that emails are present, unique, and correctly formatted during the account creation process.
• Action-Based Access Restrictions - Controls access to specific application actions based on the user's current authentication status.
• Route-Based Access Restrictions - Enforces authentication requirements on specific routing paths and URL patterns.
• Session-Based Access Controls - Implements a security layer that restricts access to protected resources based on valid signed-in user sessions.
• Email-Password Authentications - Authenticates users by verifying email and password credentials against stored database records.
• Request Authentication Middleware - Uses request-processing middleware to expose user identity to the application environment for access control.
• Secure Hashed Password Storage - Protects sensitive user credentials by storing one-way cryptographic hashes instead of plain text passwords.
• Password Hashing Utilities - Protects user credentials by storing one-way cryptographic hashes instead of plain text passwords.
• Cookie-Based Session Management - Maintains authenticated states using cryptographically signed cookies to prevent client-side tampering.
• User Account Creators - Provides a registration system to collect user credentials and establish new accounts in the database.
• Email-Password Registrations - Handles the creation of new user accounts using email and password credentials.
• User Authentications - Manages user identity and controls access to protected application features via email and password authentication.
• User Identity Management - Tracks the current signed-in user and provides access to their identity across controllers and views.
• Web Sign-in Flows - Implements the manual sign-in flow to validate credentials and establish an authenticated session.
• Page Access Restrictions - Restricts access to specific pages or controllers by requiring a valid authenticated session.
• Identity Integration Layers - Exposes the current session and user identity within the request environment for use by subsequent application layers.
• Session Management Middleware - Provides middleware that manages user sessions and injects identity into the request environment.
• Constant-Time Comparison Logic - Ensures authentication requests take consistent time to prevent attackers from enumerating existing user emails.
• Cookie Security - Implements secure cookie handling with signing and security flags to protect session integrity.
• Constant-Time Authentication - Uses constant-time comparison logic during credential verification to protect against timing attacks.
• Session Fixation Protections - Protects against session hijacking by regenerating session identifiers during the sign-in process.
• Session Cookie Security - Applies security policies to session cookies to prevent hijacking and maintain session integrity.
• Password Recovery Systems - Provides a secure workflow for recovering lost passwords via tokenized email links.
• Secure Session Management - Manages user identity across requests using secure, signed browser storage and token rotation.
• Password Resets - Provides a secure token-based workflow for users to recover and update forgotten passwords via email.
• Sign-In Event Hooks - Allows interception of the sign-in process via hooks to enforce custom account requirements.
• Chain of Responsibility Implementations - Implements a chain of responsibility pattern to process sign-in requests through a sequence of configurable guards.
• Test User Authenticators - Includes utilities for injecting user identities into requests to bypass manual sign-in flows during automated tests.
• Authentication - Simple email and password authentication.
• Authentication and OAuth - Simple email and password authentication for Rails.

Istoric stele