# Authentication and registration plug-in?

**URL:** <https://www.ruby-forum.com/t/authentication-and-registration-plug-in/106009>\
**Category:** Rails\
**Created:** [June 5, 2007, 4:43pm UTC](https://www.ruby-forum.com/t/authentication-and-registration-plug-in/106009 "2007-06-05T16:43:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![chirag](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ecccb3/32.png) [@chirag](https://www.ruby-forum.com/u/chirag)\
**Post date:** [June 5, 2007, 4:43pm UTC](https://www.ruby-forum.com/t/authentication-and-registration-plug-in/106009/1 "2007-06-05T16:43:43Z")

</div>

I’m designing a HIPAA compliant Rails site and need a plug-in to do  
the following

# Auto-Expiry: Each user is assigned a unique password; system has

password expiration enabled with expiration time configurable by  
system administrator.

# salted password

# Secure Connection: Usage of HTTPS and SSL

# e-mail registration

I’ve seen the list of authentication plugins (http://  
[wiki.rubyonrails.org/rails/pages/Authentication](http://wiki.rubyonrails.org/rails/pages/Authentication)) but wanted to get  
some feedback from someone who has implemented as many of the above  
features as possible. Any advice on picking and implementing one of  
these plug-ins?

Thanks!  
Chirag

---

<div class="post-metadata">

**Author:** ![chirag](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/ecccb3/32.png) [@chirag](https://www.ruby-forum.com/u/chirag)\
**Post date:** [June 7, 2007, 6:44am UTC](https://www.ruby-forum.com/t/authentication-and-registration-plug-in/106009/2 "2007-06-07T06:44:15Z")

</div>

I’ve used restful\_authentication and it does everything except the  
auto-expiry, which should be straightforward to add. You’ll need to  
add the SSL setup, which is easy with the ssl\_requirement plugin.

Do you have any pointers to good summaries of what is required to make  
a Rails site HIPAA compliant?

Michael  
[www.mslater.com](http://www.mslater.com)