Password expiration in 14 to 45 days using devise gem - ruby-on-rails-3

We used a devise gem for Login functionality.
Now i want to implement the password expiration functionality.
So i got one devise gem i.e "devise_security_extension" on git hub.
I read this documentation for implementation of "devise_security_extension".
I tried the steps from documentation.But it is not working for me.
Can any one give step by step process to implement this "devise_security_extension" gem.

I spotted this question on the devise_security_extension issues page, I know it's been a while for you, but it might work. That leads to this fix, which I am going to try and implement tonight.
I'll report back if it helps

Related

Ruby on Rails two factor authentication with Devise

I would like to setup two factor authentication with devise using Ruby on Rails 5. I've been using multiple gems with no luck what so ever. I was hoping if anyone out there could help me out. Thank you.

Box.net data access through attachements.me ruby gem

Can anyone please have some tutorial or link for accessing Box.net API through attachements.me ruby gem?
I want to access box data though attachements.me ruby gem from Ruby on Rails application but I don't understand where to start.
I created a new rail app and want to add attachements.me ruby gem. I updated the gem file and installed bundle.
I will have to authenticate users but cant understand where to start.
Thanks
You should start by reading through their great documentation here: https://github.com/attachmentsme/ruby-box
A great place to begin is authenticating a user. You need to redirect them to the authorize_url after they click a button or link in one of your views to connect their Box account.
Box will send a code with the redirect URI that you need to capture to create this instance variable: #token = session.get_access_token('code-returned-to-redirect_url')
Once you do this, use the #token instance variable to create a session = RubyBox::Session.new
To understand what is going on behind the scenes, I'd also recommend reading through the Box documentation here: http://developers.box.com/oauth/

rails_admin cancan abilities not loaded first time

I'm using RailsAdmin, this time with CanCan!
I've built my Ability Model and everything looks nice. Except for this problem:
When the user logs in for the very first time (I'm using Devise), for some reason the system is not loading the correct permissions. This leads to the unconvenient situation: the user can see more actions and entities the the actual permissions would normally grant. Any subsequent requests work fine and the correct permissions are loaded. Don't know what else I might add. Logs are not reporting anything relevant. Anyone experiencing something similar?
rails 3.2.8
rails_admin 0.4.4
cancan 1.6.7
devise 2.1.2

PHPBB Authentication + Rails

I have a phpbb forum and i am developing a rails application that will be used for a mobile friendly app. I need a way to perform SSO between phpbb and rails.
I found a ruby gem called phpbb-auth on github but it hasn't been updated in over 3 years.
My initial thoughts were to mimic phpass (which i believe is what the latest phpbb uses) in rails and then just have rails reference the phpbb_users table when authenticating with Devise/Warden.
However, that task became daunting and would become just another lib to manage.
My next thought was to write a plugin for Warden to check for a phpbb_session and if its there, then continue. Otherwise redirect them to the phpbb login page.
Has anyone come across doing this before, and if so what was the method you used.
I doing same thing right now (already succeed actually).
So, you basically have several options depending on your setup/deployment. Consider following:
Will you deploy your rails app and phpbb on same domain or different domains?
Have both sites access to each other db.
Which authentication system you whish to use? So, you'd like rails (i.e. devise, authlogic or whatever) authenticate and handle users or phpbb db auth (i.e. storing logins and password in phpbb users table).
So far, I've implement auth through phpbb db auth + single domain with my app (phpbb: forum.example.com, my rails app is on: example.com for cookie sharing). In this case you can use code from gem you have mentioned (phpbb-auth). It's not very hard. Code is still working fine (with some adjustments probably).
BUT
I do not like it this way :) I consider my site as a main app and do not want forum to handle my users...
So, as I understand starting from phpbb 3 you can write plugin (API docs) for external auth for phpbb.
There are several examples in Python and Django in the net. Looks like this one for same domain + db access. And looks like this one for doing things remotely with JavaScript. Those are in Python, but there's not too much Python inside, only some examples :), so you can easily adopt them for rails, I think.
This question discuss same stuff, but in more generic way.

authlogic connect tutorial

I am trying to add the facebook connect to an existing site in rails 3 that uses authlogic.
so that existing users can sign in via their facebook account (I'll find existing account via email id in facebook ) and new users can sign up using facebook too.
I am trying to use authlogic connect
( I found other alternative like omniauth , facebooker2 etc , omniauth plays well with devise but I dont want to move to devise & it seems only authlogic connect plays well with authlogic and rails3 )
But I am unable to find some proper tutorial where I could understand how to use it.
I looked at their project site :
https://github.com/viatropos/authlogic-connect
I used the little help on their site and tried to do a little.
Now when the facebook login button is clicked it goes to facebook page asks for all the permission and then it comes back to a url with code as a paramater. what do I do with the code param ?
Can someone suggest me a proper tutorial (not example) for using the authlogic connect
Thank you
I really gave up on authlogic connect.
Though it seems its the best solution, It integrates so much iwht the authlogic that I am unable to customize it.
I finally got omniauth working with authlogic , though a lot of things were manually done
railcasts simple omniauth authentication helped a lot,