current community

your communities

more stack exchange communities

Stack Exchange
tour help
careers 2.0

Tagged Questions

3
votes
2answers
383 views

Where can I store the password/username combo that's used in Rails' http_basic_authentication_with?

I'm trying to use Rails' http_basic_authenticate_with method to secure a personal app. The docs show this as an example: class PostsController < ApplicationController ...
3
votes
2answers
437 views

devise http basic auth for html format

I have the following configuration: devise :database_authenticatable config.http_authenticatable = true on request: http://user:password@localhost:3000/ Devise ignores the http auth login and ...
2
votes
2answers
1k views

Skip Rails http_basic_authenticate_with in RSpec test

I'm working on a MVP (minimum viable product). In order to offer a simpler way to secure the admin pages, I just did add http_basic_authenticate_with to my AdminController. Problem is that when I ...
1
vote
2answers
109 views

keep http authentication private in a public github repo?

I have a public Github repo for an app that I'd like to add authentication to. I plan to use basic http authentication, but this would require that I store the username and password in the ...
1
vote
1answer
615 views

HTTP Basic Custom Error Possible in Rails?

I am building an application in Rails 2.3.14 using Ruby 1.8.7. My client has requested a very simple authentication on a webinars page. I thought using http_auth would be very fitting, as it just ...
1
vote
1answer
122 views

RoR Password Protect Assets

I am trying to password protect the fonts sub-directory in my assets directory because of licensing etc. I have tried a few ideas for routing, but I haven't been able to figure one out yet. As of ...
1
vote
1answer
2k views

HTTP Basic authentication using Authlogic or authenticate_or_request_with_http_basic for API call?

I have a Rails 2.3.x app that implements the act_as_authentic in User model and a UserSession model as per Authlogic Github example. I am implementing an API to allow access from iPhone. Will be using ...
1
vote
1answer
112 views

Devise's HTTP authentication breaks regular sign out

Regular sign in and sign out works fine in my app. However, when I use HTTP Authentication to sign in to access JSON or XML resources and then go back and click the sign out button it redirects me to ...
1
vote
0answers
134 views

Rails HTTP basic authentication across subdomains

I've got some really basic authentication for a staging/testing site (this is just to protect the staging site, we use Devise for authentication within the app): ...
1
vote
1answer
195 views

Where should I put username/password for http basic authentication in rails app

I am going to use http-basic-authentication in a rails app. I watched this railscast to figure out how do do that: http://railscasts.com/episodes/82-http-basic-authentication In the video he says ...
0
votes
1answer
61 views

Rails Before Filter Usage

In my Rails 4 app I'm creating an API with access to the index, create, show, update, and destroy methods in the controller. For authentication, I'm using HTTP Basic with credentials instead of a ...
0
votes
3answers
428 views

Rails HTTP Basic check for authenticated?

I've been googling this one and haven't turned up anything useful: Assuming you use http basic auth in Rails is there a simple method to check if the user is authenticated? Ie. a way you can do ...
0
votes
1answer
47 views

Making sure my http_basic_authenticate_with password isn't floating around

I wan't to make sure my http_basic_authenticate_with username and password isn't floating around since if i add it to get hub it would be displayed. I thought of doing something similar to this ...
0
votes
1answer
120 views

How can i use http_basic_authenticate_with only on certain subdomain

I wan't my http_basic_authenticate_with to work on the admin subdomain. I tried declaring it like this http_basic_authenticate_with :name => ENV["WEBSITE_USERNAME"], ...
0
votes
1answer
80 views

authenticate_or_request_with_http_basic always returns false

In my Rails 2.3 app we have an admin section that is protected by basic HTTP authentication. This has worked on our production and staging environments for years. Recently I setup a new environment to ...
0
votes
0answers
121 views

Rails http_remote_user: (null)

My Rails App is protected with WebAuth and LDAP. The logic for the working http_remote_user is taken from Rails - getting remote_user to return username from apache. /etc/apache2/httpd.conf ...
0
votes
0answers
23 views

Security solution for a site with admin but no regular users

I'm creating a rails app without regular users but with an admin who can enter a secure area to post content/moderate/edit settings. Therefore a fully fledged user authentication / authorisation ...
0
votes
1answer
118 views

Encrypting (not hashing) and storing user passwords on a rails server, using devise cookies

Got a bit of an issue where I am required to maintain a secure connection with one server that proxies out requests to another, over basic authentication. However I can't be allowed to gain access to ...
0
votes
1answer
308 views

Authlogic and Android, Verify user credentials

I have a rails app that uses Authlogic (from gem Communityengine). Now I want users to be able to login on a mobile device (Android in that case) If I understand correctly I can use Http Basic ...
0
votes
1answer
242 views

HTTP basic authentication - additional date parameter (Rails)

I'm writing a rails web service and i would like to use authlogic for authentication, since this seems to be one of the most used and active authentication gem. Our clients should be abled to ...
0
votes
2answers
735 views

Authlogic HTTP Basic UserSession.find returns nil, means declarative_authorization can't get a current_user

When using Authlogic's HTTP Basic auth, UserSession.find returns nil since the session appears not to be set. As a result, declarative_authorization, which references the usual current_user method (as ...
0
votes
1answer
478 views

HTTP Basic Authentication with Authlogic

I'm trying to get http basic authentication working on my rails app. I am running the app with nginx and passenger. I have the authlogic gem working and my authentication works. I have even used the ...
0
votes
1answer
208 views

Rails set basic http Auth Credentials programatically

authenticate_or_request_with_http_basic do |user, password| user == USER && password == PASSWORD end The above code asks for a username and password in a regular fashion (using ...