Using BCrypt

[ghost]

I'm not sure how to approach password storing in CouchDB. I'd like to use BCrypt and therefore do something like this:

require 'couchrest_model'
require 'bcrypt'

class User < CouchRest::Model::Base
  include BCrypt

  use_database 'sample'
  property :_id, String
  property :email, String
  property :password, BCryptHash

  timestamps!
end

However that tells me that User::BCryptHash is an uninitialized constant. Any way to make this work or am I just doing it wrong?

[jhecking]

Have you tried using ActiveModel's has_secure_password method?

Something like this should work (untested):

class User < CouchRest::Model::Base
  use_database "sample"
  timestamps!
  has_secure_password

  property :email, String
  property :password_digest, String

  design do
    view :by_email
  end
end

You use it the same way as in the ActiveModel::SecurePassword documentation:

user = User.new(email: 'david', password: '', password_confirmation: 'nomatch')
user.save                                                       # => false, password required
user.password = 'mUc3m00RsqyRe'
user.save                                                       # => false, confirmation doesn't match
user.password_confirmation = 'mUc3m00RsqyRe'
user.save                                                       # => true
user.authenticate('notright')                                   # => false
user.authenticate('mUc3m00RsqyRe')                              # => user
User.find_by_email('david').try(:authenticate, 'notright')      # => false
User.find_by_email('david').try(:authenticate, 'mUc3m00RsqyRe') # => user

[ghost]

Thanks @jhecking, I think that's what I'm looking for however it seems to be telling me undefined local variable or method 'has_secure_password' for User:Class (NameError). Maybe because ActiveModel::SecurePassword isn't required in lib/couchrest_model.rb?

[jhecking]

Sorry, looks like you need to include ActiveModel::SecurePassword in your model class as well.

[ghost]

Awesome, thanks!

[ghost]

I just noticed that by creating some new users, they don't appear in the actual DB (I'm viewing it in Futon). I have the following code:

require 'couchrest_model'

class User < CouchRest::Model::Base
  include ActiveModel::SecurePassword

  use_database 'sample'
  has_secure_password

  property :username, String
  property :email, String
  property :password_digest, String

  timestamps!

  design { view :by_email }
end

User.create(:username => 'rafalchmiel', :email => 'hi@rafalchmiel.com', :password => 'password')
User.create(:username => 'bar', :email => 'hi@bar.com', :password => 'password213')
User.create(:username => 'foo', :email => 'hi@foo.com', :password => 'password12111')

After running it, no documents are inserted. However if I run all this except leave out has_secure_password, everything works fine; the DB is created if not already and three new documents are inserted. Any ideas as to why this is happening?

[jhecking]

has_secure_password adds a validation to your model that requires that you pass a password_confirmation property whenever you set or change the password.

Jan

On 24 Nov, 2013, at 2:59 am, Rafal Chmiel notifications@github.com wrote:

I just noticed that by creating some new users, they don't appear in the actual DB (I'm viewing it in Futon). I have the following code:

require 'couchrest_model'

class User < CouchRest::Model::Base
include ActiveModel::SecurePassword

use_database 'sample'
has_secure_password

property :username, String
property :email, String
property :password_digest, String

timestamps!

design { view :by_email }
end

User.create(:username => 'rafalchmiel', :email => 'hi@rafalchmiel.com', :password => 'password')
User.create(:username => 'bar', :email => 'hi@bar.com', :password => 'password213')
User.create(:username => 'foo', :email => 'hi@foo.com', :password => 'password12111')
After running it, no documents are inserted. However if I run all this except leave out has_secure_password, everything works fine; the DB is created if not already and three new documents are inserted. Any ideas as to why this is happening?

—
Reply to this email directly or view it on GitHub.

[ghost]

Super, thanks a lot!