News for hackers. Stuff that matters.

A comment on Steam loses user database. Parent comment

Re:Steam loses user database by cheald on Thursday November 10, 2011 @07:03PM (#3222607)
Any modern Rails app is very likely using bcrypt to store password hashes. It's baked into most of the popular auth frameworks.
[ Parent | on HN ]
Re:Steam loses user database by JonnieCache on Thursday November 10, 2011 @08:11PM (#3222848)
It's actually now baked into rails itself. You can declare

    has_secure_password
in the model and you're away.
[ Parent | on HN ]
Re:Steam loses user database by lawnchair_larry on Thursday November 10, 2011 @10:10PM (#3223194)
Why would you have to declare it?
[ Parent | on HN ]
Re:Steam loses user database by mguillemot on Thursday November 10, 2011 @10:32PM (#3223241)
Because it adds a few attributes (like 'password') and methods (like 'authenticate') to your model, and you might not really want such things on every one of your models.

Clarification: has_secure_password does NOT mean you choose between secure or non-secure password, it just mean "I want a password on this model, and better make it secure guys!"

[ Parent | on HN ]