Heads up! To view this whole video, sign in with your Courses account or enroll in your free 7-day trial. Sign In Enroll
Well done!
You have completed Rails 8 Course - Beginner to Intermediate!
Preview
Video Player
00:00
00:00
00:00
- 2x 2x
- 1.75x 1.75x
- 1.5x 1.5x
- 1.25x 1.25x
- 1.1x 1.1x
- 1x 1x
- 0.75x 0.75x
- 0.5x 0.5x
This video covers implementing authentication in a Rails 8 application, comparing the new Rails authentication generator with Devise, and setting up Devise for user authentication, including login, signup, and access control for posts.
Resources
Related Discussions
Have questions about this video? Start a discussion with the community and Treehouse staff.
Sign upRelated Discussions
Have questions about this video? Start a discussion with the community and Treehouse staff.
Sign up
Okay guys, the next step on our agenda
is to introduce a basic authentication
0:00
generator in our application.
0:03
Well, it's not going to be that basic,
we are going to add OAuth.
0:04
And so I'm just going to talk a little
bit about this rails 8 new authentication
0:07
generator.
0:11
So this is the first rails
authentication generator that we have.
0:11
It comes out of the box with rails 8 and
0:14
you can simply add some authentication
using a few simple commands.
0:16
For example, just with this one command
rails generate authentication on a fresh
0:19
app, I was able to get this working.
0:24
And all you have to do is enter in Well,
in the Rails console,
0:25
if I show you now I go to my terminal,
I created a new user.
0:28
So I went rail c and
0:31
then I went user.create email address
uexample.com password test password123.
0:32
So I'll just create a new user right now.
0:38
So test password on gmail.com and
0:40
then if I go exit and rails s,
I can log in with this email.
0:43
So you@gmail.com and test password, right?
0:47
And I can sign in, that's pretty cool,
right, you can log in immediately.
0:51
However, out of the box it only includes
the bare minimum, which is login.
0:55
And features like email confirmation,
password resets,
0:58
and account locking
are definitely not included.
1:01
If we need, if we need more advanced
features, which we do, like OAuth,
1:03
which is like sign in with Google.
1:06
Then it doesn't come with that and
1:08
we're going to have to manually build it
ourselves, which is going to be a pain.
1:09
So because this authentication generator
is so new and not yet finished, in fact,
1:12
it's not even really released yet, in this
tutorial, we're not going to be using it,
1:16
we're going to be using devise instead.
1:20
The main reasons we're going to use
Devise instead of the Rails generator
1:22
are its comprehensive features,
customization, proven security,
1:25
and community and documentation.
1:28
So that if you get stuck, look,
we can easily search something up.
1:30
So while the new Rails generator could be
excellent for small, simple applications.
1:32
It falls short for projects with more
advanced or specific authentication needs.
1:36
So for production ready applications
requiring flexibility and
1:39
scalability quickly,
Devise remains the gold standard.
1:42
Okay, so because we're going to
use Devise, open up a new tab and
1:44
go to rubygems.org.
1:47
Once you're on this website,
we're going to search up Devise and
1:48
then as you can see, it's the first
option with 217 million downloads.
1:51
It's a flexible authentication
solution for Rails.
1:54
So it's going to allow us to add user
authentication to our application
1:56
very quickly and easily.
2:00
So in the gem,
we're going to add this to the gem file.
2:01
So copy this here gem devise, so
go to VS code, go to the gem file,
2:03
this is the first gem we've added.
2:06
So just copy and paste it anywhere in here
gem device and then run bundle install.
2:08
So gems are like packages.
2:11
So I set up the server and
run bundle install.
2:13
This will allow us to actually use what
is inside of devise, all of the methods,
2:15
everything good, that's just
gonna actually install the gem.
2:19
Next up we're going to go to
the homepage which has all of
2:22
the documentation on GitHub.
2:24
Go to this website, scroll down and
then we're going to run the generator.
2:25
So let's run the generator.
2:28
So go to the terminal, run the generator,
I'll just make sure you can see it.
2:29
So rails generate device install,
hit Enter.
2:33
Now there are four different things that
we have to do, four different commands.
2:36
So we have to add this to
our VS code developments.rb.
2:40
So it says ensure you have defined default
URL options in your environment files,
2:43
default URL options.
2:47
Here is an example of default URL options
appropriate for development environment.
2:48
So yeah, let's go ahead and
add this to development.rb.
2:51
You don't have to worry about
this not that important for now.
2:53
So go to config
environment.development.rb,
2:57
add this in here,
save the file, that's it.
2:59
Next step.
Now ensure you have defined root URL to
3:01
something in your config roots b for
example, root to: home#index.
3:03
Now if you noticed, if we go to routes.rb,
we have actually done that.
3:07
So it says root pages#home.
3:10
So yeah, that's done.
3:12
Now it says ensure you have
flash messages installed.
3:13
So we can just add these flash messages
and that way it will say like you have
3:16
signed up successfully or
you've logged in and that's cool.
3:20
So we're gonna go app views
layouts application.html.erb and
3:24
in this file we're going to
add it above the yield tag.
3:27
Then we're gonna go back to the terminal
and inside of here we're going to
3:29
say you can copy device views to your
app by running rails devise views.
3:34
Let's go ahead and
run those views, run that command.
3:39
So rails g devise:views.
3:40
So what this is gonna do
is create all the views.
3:43
Now the views is just a folder in views,
3:45
and as you can see now we have
a new folder called devise.
3:47
And this is why that many small really,
really small applications don't want to
3:50
use devise because it's
such heavy large gem.
3:53
That's why they're creating
the authentication solution.
3:55
But as I said, we're not going to use
the authentication solution in this video
3:58
because it does not have all
the features that we need.
4:01
But at least now you know about it and
4:03
in the future it's gonna become a viable
option and you'll be able to use it.
4:04
Okay, so
now let's go back to the the browser and
4:07
inside of here we're going
to generate a model.
4:10
So let's go ahead and
generate a model for devise.
4:12
So we're gonna run rails g device model.
4:14
So we're going to run rails g devise and
it's not going to be called model,
4:17
we're gonna call it users.
4:20
So run rails g devise user.
4:21
So rails g devise user and then clear, and
as you can see, that created a user model.
4:23
So if we go to models now we have
a user model, so that's cool.
4:29
And then if we go to db migrate and then
the newest one we have a users migration.
4:32
So now if we run rails db migrate,
this is gonna migrate to the database.
4:38
So if we go to the schema rb
now before we run that command,
4:42
then we can see that it looks like this.
4:45
But after we run this command,
we're gonna have a new table in here and
4:47
it's called the users.
4:50
And as you can see it's there and
it says create table users added here, so
4:51
that's perfect.
4:54
Now that that's done, we're gonna erase s,
go back to our application and
4:55
see what happens.
4:58
So this is looking good, but the first
thing we need to do is make it so
4:59
that we cannot create a new
post without signing in, right?
5:02
So let's go ahead and do that.
5:05
So we're going to go to the post
controller and inside of here we're
5:07
gonna say before_action and
we're going to say authenticate_user.
5:12
And then we're gonna say only %I and
we're gonna say and
5:17
we're gonna say new edit create and
destroy.
5:21
So if we do all that now, we should not be
able to create a post without signing in.
5:24
So if I do new post, as you can see,
it says you need to log in and
5:30
sign up before continuing.
5:33
And this is all new code
that was added to devise.
5:35
And that's why I like devise,
it's very, very quick.
5:37
And now if we actually sign up and create
a new account, we're gonna add an account.
5:39
So I'm gonna say malachirails@gmail.com
password of 12356 123456 Sign Up.
5:43
And as you can see, now we're signed
up and we can create a new post.
5:52
That works and that's perfect.
5:54
You need to sign up for Treehouse in order to download course files.
Sign upYou need to sign up for Treehouse in order to set up Workspace
Sign up