Session handling in Ruby on Rails

Introduction

Session handling lets a website remember who you are as you move between pages. It helps keep you logged in and saves your choices.

When you want users to stay logged in while browsing different pages.

To save user preferences like language or theme during a visit.

To keep track of items in a shopping cart before checkout.

When you need to store temporary data between requests without saving it in the database.

Syntax

Ruby on Rails

session[:key] = value
value = session[:key]
session.delete(:key)
session.clear

Use session[:key] = value to store data in the session.

Access stored data with session[:key]. Remove data with session.delete(:key) or clear all with session.clear.

Examples

Stores the user ID 42 in the session to remember the logged-in user.

Ruby on Rails

session[:user_id] = 42

Retrieves the stored user ID from the session.

Ruby on Rails

current_user_id = session[:user_id]

Removes the user ID from the session, logging the user out.

Ruby on Rails

session.delete(:user_id)

Clears all session data, useful when logging out or resetting session info.

Ruby on Rails

session.clear

Sample Program

This controller handles simple session management. The create action logs in a user by saving their name in the session. The show action displays the current logged-in user if any. The destroy action logs out the user by removing their name from the session.

Ruby on Rails

class SessionsController < ApplicationController
  def create
    # Simulate user login
    session[:user_name] = params[:user_name]
    render plain: "Logged in as #{session[:user_name]}"
  end

  def show
    if session[:user_name]
      render plain: "Current user: #{session[:user_name]}"
    else
      render plain: "No user logged in"
    end
  end

  def destroy
    session.delete(:user_name)
    render plain: "Logged out"
  end
end

Important Notes

Sessions use cookies to keep track of users between requests.

Do not store sensitive data directly in sessions; store only IDs or tokens.

Session data is temporary and cleared when the browser closes or after expiration.

Summary

Sessions help websites remember users across pages.

Use session[:key] to store and retrieve data.

Clear sessions to log users out or reset data.

Practice

1. What is the main purpose of using session in a Rails application?

easy

A. To style the webpage dynamically

B. To handle file uploads

C. To connect to the database

D. To store user data across multiple requests

Solution

1. Step 1: Understand what sessions do

   Sessions keep data between different pages or requests for the same user.

2. Step 2: Identify the correct purpose

   Storing user data like login status or preferences is the main use of sessions.

3. Final Answer:

   To store user data across multiple requests -> Option D

4. Quick Check:

   Sessions remember user info across pages = B [OK]

Hint: Sessions keep user info between pages [OK]

Common Mistakes:

• Confusing sessions with styling or database connections
• Thinking sessions handle file uploads

2. Which of the following is the correct way to store a user's name in the session in Rails?

easy

A. session = { name: 'Alice' }

B. session[:name] = 'Alice'

C. session.name = 'Alice'

D. session('name') = 'Alice'

Solution

1. Step 1: Recall session syntax in Rails

   Sessions use a hash-like syntax with square brackets and symbols for keys.

2. Step 2: Match the correct syntax

   Assigning with session[:name] = 'Alice' is the proper way.

3. Final Answer:

   session[:name] = 'Alice' -> Option B

4. Quick Check:

   Use session[:key] = value syntax = A [OK]

Hint: Use session[:key] = value to store data [OK]

Common Mistakes:

• Using assignment with equals on session itself
• Trying to call session like a method
• Using dot notation which is invalid

3. What will be the output of the following Rails controller code snippet?

session[:count] ||= 0
session[:count] += 1
render plain: session[:count]

medium

A. nil

B. 0

C. 1

D. Error

Solution

1. Step 1: Understand the ||= operator

   If session[:count] is nil or false, it sets it to 0; otherwise, it keeps the value.

2. Step 2: Increment the count

   After setting to 0 if needed, it adds 1, so the value becomes 1.

3. Final Answer:

   1 -> Option C

4. Quick Check:

   Initialize or keep count, then add 1 = 1 [OK]

Hint: ||= sets default, then += increments [OK]

Common Mistakes:

• Thinking ||= 0 sets count to 0 every time
• Expecting output 0 instead of 1
• Assuming session[:count] is nil after increment

4. Identify the error in this Rails controller code that tries to clear the session:

def logout
  session.clear()
  redirect_to root_path
end

medium

A. No error; code correctly clears the session

B. Missing parentheses in session.clear call

C. session.clear should be session.delete_all

D. session.clear is not a valid method

Solution

1. Step 1: Check session clearing methods in Rails

   Rails session supports clear method to remove all keys.

2. Step 2: Verify syntax and usage

   Calling session.clear() is valid and clears the session.

3. Final Answer:

   No error; code correctly clears the session -> Option A

4. Quick Check:

   session.clear() clears session correctly = D [OK]

Hint: session.clear() empties session data correctly [OK]

Common Mistakes:

• Thinking session.clear() is invalid
• Confusing with database delete methods
• Assuming parentheses are mandatory or cause error

5. You want to store a user's preferred language in the session only if it is not already set. Which code snippet correctly does this in a Rails controller?

hard

A. All of the above

B. session[:language] ||= params[:language]

C. session[:language] = params[:language] if session[:language].nil?

D. session[:language] = params[:language] unless session[:language]

Solution

1. Step 1: Understand the goal

   We want to set session[:language] only if it is not already set.

2. Step 2: Analyze each option

   session[:language] = params[:language] if session[:language].nil? uses if session[:language].nil?, which sets only if nil.
   session[:language] ||= params[:language] uses ||= which sets if false or nil.
   session[:language] = params[:language] unless session[:language] uses unless session[:language], which sets if false or nil.
   All three effectively do the same thing.

3. Final Answer:

   All of the above -> Option A

4. Quick Check:

   All three set only if session[:language] is unset = C [OK]

Hint: ||= or conditional assignment both work [OK]

Common Mistakes:

• Thinking only ||= works
• Confusing unless with if
• Setting session unconditionally