每天一剂Rails良药之Authentication

hideto

浏览: 2678301 次
性别:
来自: 北京

最近访客更多访客>>

_Mark24_

lzyfn123

leeyisoft

linziyuu

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

博客分类：

Ruby

Rails ActiveRecord Access UP

今天我们来看看Rails怎么处理登录认证
虽然Rails有很多登录认证的插件，但是我们可以自己动手丰衣足食

1，db/migrate/001_add_user_table.rb

class AddUserTable < ActiveRecord::Migration
  def self.up
    create_table :users do |t|
      t.column :username, :string
      t.column :password_salt, :string
      t.column :password_hash, :string
    end
  end

  def self.down
    drop_table :users
  end
end

2，app/models/user.rb

class User < ActiveRecord::Base
  validates_uniqueness_of :username

  def password=(pass)
    salt = [Array.new(6){rand(256).chr}.join].pack("m").chomp
    self.password_salt, self.password_hash = salt, Digest::SHA256.hexdigest(pass + salt)
  end

  def self.authenticate(username, password)
    user = User.find(:first, :conditions => ['username = ?', username])
    if user.blank? || Digest::SHA256.hexdigest(password + user.password_salt) != user.password_hash
      raise "Username or password invalid"
    end
    user
  end
end

3，app/controllers/admin_controller.rb

class AdminController < ApplicationController
  before_filter :check_authentication, :except => [:signin_form, :signin]

  def check_authentication
    unless session[:user]
      session[:intended_action] = action_name
      redirect_to :action => :signin_form
    end
  end

  def signin
    session[:user] = User.authenticate(params[:username], params[:password]).id
    redirect_to :action => session[:intended_action]
  end

  def signout
    session[:user] = nil
    redirect_to home_url
  end

end

4，app/views/sign_form.rhtml

<html>
  <head>
    <title>Signin for Admin Access</title>
  </head>
  <body>
    <%= start_form_tag :action => "signin" %>
      <label for="username">Username:</label>
      <%= text_field_tag "username" %><br/>
      <label for="password">Password:</label>
      <%= text_field_tag "password" %><br/>
      <%= submit_tag "Sign in" %>
    <%= end_form_tag %>
  </body>
</html>

我们也可以将check_authentication方法放到application.rb里面，供其他Controllers使用

分享到：

每天一剂Rails良药之Role-Based Authoriza ... | 每天一剂Rails良药之Safely Use Models in ...

2007-05-07 23:42
浏览 4641
评论(6)
查看更多

6 楼 dashuang 2012-02-14

5 楼 dashuang 2012-01-21

4 楼 kewin 2010-12-03

这个还比较简单阿

3 楼 iigm 2007-09-05

没看明白

2 楼 hideto 2007-08-12

错误提示说了，把signin_form.rhtml放到app/views/user/目录下

1 楼 danielking 2007-08-12

我把signin_form.rthml放在了views的根目录,就提示这个了:
No such file or directory - ./script/../config/../app/views/user/signin_form.rhtml

怎么回事?

发表评论

您还没有登录,请您登录后再发表评论

最近访客更多访客>>

博主相关

文章分类

社区版块

存档分类

最新评论