has_secure_password in Ruby on Rails - Mini Project: Build & Apply

Using has_secure_password in Rails

📖 Scenario: You are building a simple user authentication system for a website. Users will have a password that needs to be stored securely.

🎯 Goal: Create a Rails model that uses has_secure_password to handle password hashing and authentication.

📋 What You'll Learn

Create a User model with a password digest column

Add has_secure_password to the User model

Create a new User instance with a password

Verify that the password is stored securely and authentication works

💡 Why This Matters

🌍 Real World

Web applications need to store user passwords securely to protect user accounts and data.

💼 Career

Understanding has_secure_password is essential for Rails developers building authentication systems.

1

Create User model with password_digest column

Create a Rails model called User with a string column named password_digest in the database migration.

Ruby on Rails

# Create User model and migration with password_digest column
# Your code here

Need a hint?

Use rails generate model User password_digest:string to create the model and migration.

2

Add has_secure_password to User model

Add has_secure_password inside the User model class to enable password hashing and authentication.

Ruby on Rails

class User < ApplicationRecord
  # Add has_secure_password here
  # Your code here
end

# Migration file example:
# class CreateUsers < ActiveRecord::Migration[7.0]
#   def change
#     create_table :users do |t|
#       t.string :password_digest
#       t.timestamps
#     end
#   end
# end

Need a hint?

Place has_secure_password inside the User class, below class User < ApplicationRecord.

3

Create a new User with a password

Write code to create a new User instance with password set to "secret123" and save it to the database.

Ruby on Rails

class User < ApplicationRecord
  has_secure_password
end

# Create a new user with password 'secret123'
# Your code here

Need a hint?

Use User.new(password: "secret123") to create the user and then call save on it.

4

Authenticate the User with password

Use the authenticate method on the user object to check if the password "secret123" is correct.

Ruby on Rails

class User < ApplicationRecord
  has_secure_password
end

user = User.new(password: "secret123")
user.save

# Authenticate user with password 'secret123'
# Your code here

Need a hint?

Call user.authenticate("secret123") to verify the password.