mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
update ActiveModel::SecurePassword docs [ci skip]
This commit is contained in:
parent
79b8778721
commit
f0f7786aab
1 changed files with 38 additions and 18 deletions
|
@ -6,12 +6,12 @@ module ActiveModel
|
||||||
# Adds methods to set and authenticate against a BCrypt password.
|
# Adds methods to set and authenticate against a BCrypt password.
|
||||||
# This mechanism requires you to have a password_digest attribute.
|
# This mechanism requires you to have a password_digest attribute.
|
||||||
#
|
#
|
||||||
# Validations for presence of password on create, confirmation of password (using
|
# Validations for presence of password on create, confirmation of password
|
||||||
# a "password_confirmation" attribute) are automatically added.
|
# (using a +password_confirmation+ attribute) are automatically added. If
|
||||||
# If you wish to turn off validations, pass 'validations: false' as an argument.
|
# you wish to turn off validations, pass <tt>validations: false</tt> as an
|
||||||
# You can add more validations by hand if need be.
|
# argument. You can add more validations by hand if need be.
|
||||||
#
|
#
|
||||||
# You need to add bcrypt-ruby (~> 3.0.0) to Gemfile to use has_secure_password:
|
# You need to add bcrypt-ruby (~> 3.0.0) to Gemfile to use #has_secure_password:
|
||||||
#
|
#
|
||||||
# gem 'bcrypt-ruby', '~> 3.0.0'
|
# gem 'bcrypt-ruby', '~> 3.0.0'
|
||||||
#
|
#
|
||||||
|
@ -22,35 +22,36 @@ module ActiveModel
|
||||||
# has_secure_password
|
# has_secure_password
|
||||||
# end
|
# end
|
||||||
#
|
#
|
||||||
# user = User.new(:name => "david", :password => "", :password_confirmation => "nomatch")
|
# user = User.new(name: 'david', password: '', password_confirmation: 'nomatch')
|
||||||
# user.save # => false, password required
|
# user.save # => false, password required
|
||||||
# user.password = "mUc3m00RsqyRe"
|
# user.password = 'mUc3m00RsqyRe'
|
||||||
# user.save # => false, confirmation doesn't match
|
# user.save # => false, confirmation doesn't match
|
||||||
# user.password_confirmation = "mUc3m00RsqyRe"
|
# user.password_confirmation = 'mUc3m00RsqyRe'
|
||||||
# user.save # => true
|
# user.save # => true
|
||||||
# user.authenticate("notright") # => false
|
# user.authenticate('notright') # => false
|
||||||
# user.authenticate("mUc3m00RsqyRe") # => user
|
# user.authenticate('mUc3m00RsqyRe') # => user
|
||||||
# User.find_by_name("david").try(:authenticate, "notright") # => false
|
# User.find_by_name('david').try(:authenticate, 'notright') # => false
|
||||||
# User.find_by_name("david").try(:authenticate, "mUc3m00RsqyRe") # => user
|
# User.find_by_name('david').try(:authenticate, 'mUc3m00RsqyRe') # => user
|
||||||
def has_secure_password(options = {})
|
def has_secure_password(options = {})
|
||||||
# Load bcrypt-ruby only when has_secure_password is used.
|
# Load bcrypt-ruby only when has_secure_password is used.
|
||||||
# This is to avoid ActiveModel (and by extension the entire framework) being dependent on a binary library.
|
# This is to avoid ActiveModel (and by extension the entire framework)
|
||||||
|
# being dependent on a binary library.
|
||||||
gem 'bcrypt-ruby', '~> 3.0.0'
|
gem 'bcrypt-ruby', '~> 3.0.0'
|
||||||
require 'bcrypt'
|
require 'bcrypt'
|
||||||
|
|
||||||
attr_reader :password
|
attr_reader :password
|
||||||
|
|
||||||
if options.fetch(:validations, true)
|
if options.fetch(:validations, true)
|
||||||
validates_confirmation_of :password
|
validates_confirmation_of :password
|
||||||
validates_presence_of :password, :on => :create
|
validates_presence_of :password, :on => :create
|
||||||
end
|
end
|
||||||
|
|
||||||
before_create { raise "Password digest missing on new record" if password_digest.blank? }
|
before_create { raise "Password digest missing on new record" if password_digest.blank? }
|
||||||
|
|
||||||
include InstanceMethodsOnActivation
|
include InstanceMethodsOnActivation
|
||||||
|
|
||||||
if respond_to?(:attributes_protected_by_default)
|
if respond_to?(:attributes_protected_by_default)
|
||||||
def self.attributes_protected_by_default
|
def self.attributes_protected_by_default #:nodoc:
|
||||||
super + ['password_digest']
|
super + ['password_digest']
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
@ -58,13 +59,32 @@ module ActiveModel
|
||||||
end
|
end
|
||||||
|
|
||||||
module InstanceMethodsOnActivation
|
module InstanceMethodsOnActivation
|
||||||
# Returns self if the password is correct, otherwise false.
|
# Returns +self+ if the password is correct, otherwise +false+.
|
||||||
|
#
|
||||||
|
# class User < ActiveRecord::Base
|
||||||
|
# has_secure_password validations: false
|
||||||
|
# end
|
||||||
|
#
|
||||||
|
# user = User.new(name: 'david', password: 'mUc3m00RsqyRe')
|
||||||
|
# user.save
|
||||||
|
# user.authenticate('notright') # => false
|
||||||
|
# user.authenticate('mUc3m00RsqyRe') # => user
|
||||||
def authenticate(unencrypted_password)
|
def authenticate(unencrypted_password)
|
||||||
BCrypt::Password.new(password_digest) == unencrypted_password && self
|
BCrypt::Password.new(password_digest) == unencrypted_password && self
|
||||||
end
|
end
|
||||||
|
|
||||||
# Encrypts the password into the password_digest attribute, only if the
|
# Encrypts the password into the +password_digest+ attribute, only if the
|
||||||
# new password is not blank.
|
# new password is not blank.
|
||||||
|
#
|
||||||
|
# class User < ActiveRecord::Base
|
||||||
|
# has_secure_password validations: false
|
||||||
|
# end
|
||||||
|
#
|
||||||
|
# user = User.new
|
||||||
|
# user.password = nil
|
||||||
|
# user.password_digest # => nil
|
||||||
|
# user.password = 'mUc3m00RsqyRe'
|
||||||
|
# user.password_digest # => "$2a$10$4LEA7r4YmNHtvlAvHhsYAeZmk/xeUVtMTYqwIvYY76EW5GUqDiP4."
|
||||||
def password=(unencrypted_password)
|
def password=(unencrypted_password)
|
||||||
unless unencrypted_password.blank?
|
unless unencrypted_password.blank?
|
||||||
@password = unencrypted_password
|
@password = unencrypted_password
|
||||||
|
|
Loading…
Reference in a new issue