Login and logout flow in Ruby on Rails - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of the session in a Rails login flow?

The session stores user information temporarily to keep the user logged in across different pages until they log out or the session expires.

beginner

Which Rails controller action typically handles user login?

The create action in the SessionsController usually handles user login by verifying credentials and setting the session.

beginner

How does Rails usually handle user logout?

Rails handles logout by clearing the user session, often in the destroy action of the SessionsController, which removes the user ID from the session.

intermediate

Why is it important to use has_secure_password in the User model?

It securely hashes passwords and provides authentication methods, making login safer by not storing plain passwords.

intermediate

What is a common way to restrict access to certain pages for logged-in users only?

Use a before_action filter in controllers to check if a user is logged in by verifying the session, redirecting if not.

In Rails, where is the user ID usually stored after a successful login?

A In the session hash

B In a cookie without encryption

C In the database permanently

D In the params hash

Rails stores the user ID in the session hash to keep track of the logged-in user securely during their visit.

Which controller action is responsible for logging out a user in a typical Rails app?

A new

B create

C edit

D destroy

The destroy action clears the session to log the user out.

What does has_secure_password add to a Rails User model?

A Email validation

B Password hashing and authentication methods

C Session management

D User role management

It adds secure password hashing and authentication helpers.

How can you protect a controller action so only logged-in users can access it?

A Use <code>after_action</code> to redirect

B Add a <code>skip_before_action</code>

C Use <code>before_action</code> to check session user ID

D Store user info in params

A before_action filter checks if the user is logged in before allowing access.

What happens if a user tries to access a protected page without logging in?

A They are redirected to the login page

B They see the page anyway

C The app crashes

D They get logged in automatically

The app redirects unauthorized users to the login page to protect content.

Explain the steps of a typical login flow in a Rails application.

Think about what happens from form submission to session storage.

Describe how logout works in Rails and why it is important.

Focus on session clearing and user redirection.