Being paranoid about user enumeration attack using Devise gem in Rails apps
Use Devise's in built paranoid mode to solve user renumeration attacks.…
Cross domain session sharing in Rails - Part 2
We have multiple micro services at Memory.ai which talk to each other and share data. As we are extracting more and more micro services, we were facing the problem of adding authentication layer in every service. In an ideal world, only one service would perform the authentication and other…
Cross domain session sharing in Rails - Part 1
We have multiple micro services at Memory.ai which talk to each other and share data. As we are extracting more and more micro services, we were facing the problem of adding authentication layer in every service. In an ideal world, only one service would perform the authentication and other…
prepend_before_action in Rails
Rails encourages usage of callbacks in controllers to execute common pieces of code before or after an action. A very simple example of this is calling the authenticate_user! method from Devise before every action to make sure that user is authenticated.class ApplicationController < ActionController::Base before_action :authenticate_…
Mastering Packs in Webpacker
In the previous article, we saw what Webpacker is and how Rails 6 has integrated it. In this article, we will understand how to use the packs.A new Rails 6 app creates following files under app/javascript, the new destination for writing our JavaScript code.Projects/scratch/better_hn…
Making friends with RuboCop
At Memory.ai, we started using RuboCop heavily. This is a story of how we integrated RuboCop into our existing app. This is not an introductory post to RuboCop. Check out what RuboCop is before diving into our experience report.We started with rubocop, rubocop-performance, rubocop-rails and rubocop-rspec gems. We…
DNS rebinding attacks protection in Rails 6
It is common practice to run a Rails app using a custom domain locally. app.lvh.me is very common. We also use ngrok.io sometimes to interact with third party services. If you are using a custom domain on a Rails 6 app, you will see an error with…
Understanding Webpacker in Rails 6
Starting with Rails 6, Webpacker is the default JavaScript compiler. It means that all the JavaScript code will be handled by Webpacker instead of the old assets pipeline aka Sprockets. Webpacker is different from asset pipeline in terms of philosophy as well as implementation. In this blog post, we will…
New framework defaults in Rails 6
Rails 6 is released. This post is part of the Road to Rails 6 series which will prepare you for Rails 6.Every time a new major Rails version is released, there are tons of breaking changes. Upgrading existing app to the new version can be sure shot recipe for…
Advanced multi-db techniques in Rails 6
Rails 6 is just around the corner. The release candidate two was recently released. This post is part of the Road to Rails 6 series which will prepare you for Rails 6.Check the part one of this post where we saw how to setup an app with multiple databases…