Enhance has_secure_password to also generate a password_salt method

[lazaronixon]

Motivation / Background

As mentioned here there's an additional task to be done in order to simplify the token generation for password hashes.

Before:

class User < ActiveRecord::Base
  has_secure_password
  
  generates_token_for :password_reset, expires_in: 15.minutes do
    BCrypt::Password.new(password_digest).salt[-10..]
  end
end

After:

class User < ActiveRecord::Base
  has_secure_password
  
  generates_token_for :password_reset, expires_in: 15.minutes do
    password_salt[-10..]
  end
end

[lazaronixon]

@jonathanhefner

[jonathanhefner]

Thank you for working on this! 😀

[jonathanhefner]

Also, what do you think about updating the example in the documentation for generates_token_for?

rails/activerecord/lib/active_record/token_for.rb

Lines 68 to 71 in 3dd5d49

	# generates_token_for :password_reset, expires_in: 15.minutes do
	# # Last 10 characters of password salt, which changes when password is updated:
	# BCrypt::Password.new(password_digest).salt[-10..]
	# end

[jonathanhefner]

Thank you, @lazaronixon! 🧂