Chris Oliver

DHH's keynote went up on YouTube this morning, so it shouldn't be too long!

Devise will always get security updates applied automatically, so it's generally a good idea to still use it unless you're regularly doing security testing against your application.

Congrats to everyone who has made it this far! The URL shortener was a great little project and I'm sure there's lots more improvements you can add to it.

What did you think of this project?

This is fantastic to have out of the box in Rails. Hosting can now have a place to look and we don't have to do anything custom. 👍

As long as the tokens expire, are one-time use, and the user's email isn't compromised it should be fine. You'll still want to support 2FA through another mechanism for more security.

I much prefer email/password login so I can use a password manager.

Great episode Collin! The authenticate_by method really is a bug piece of making secure authentication from scratch in Rails. These are nuances that are important (and already done in Devise), so it's nice to see they're easier than ever in Rails.

Sounds like you have a bug somewhere. Have you compared your code to the repository?

Amazing, thank you!

Looking forward to meeting you Frank!

Probably at some point in the long-term. It's a huge benefit to have everything handled in Rails instead of Devise's mixture of Rails + Rack / warden that can be harder to customize.

Authentication got a TON of great improvements in Rails 7.1 with authenticate_by, generates_token_for, normalizes, etc. Super duper excited for these things and they should clean up a lot of code. 🎉

Hey Alex,

You'll either want to run the rails server in its own terminal (without bin/dev) or switch to using overmind instead of foreman. I personally use overmind and it lets you connect to each process and interact with them, but foreman cannot.

I think that would be a JOIN and referencing the other table's column, but good suggestion. 👍

I like using Tailwind UI so I can mix and match components / layouts to create what I need since I have to customize themes anyways.

Thanks, removed the link. 👍

Also just pushed up a branch for devcontainers which you can use in VSCode or GitHub Codespaces (which is similar to cloud9) https://github.com/features/codespaces

You'd need to install Ruby, Postgres, and Redis on Cloud9. We did a screencast on Cloud9 here: https://gorails.com/episodes/aws-cloud9-ruby-on-rails-development

Nope, partials start with an underscore. The js.erb extension is the format + the renderer. So this example is a response for the js format and rendered using erb.

You can have a controller respond to the JS format.

respond_to do |format|
  format.js
end

And then render a action.js.erb file

You could also use delete_prefix so you can leave the .ruby-version file as-is. 👍

ruby File.read(".ruby-version").delete_prefix("ruby-").strip