# Login authentication - which plugin? **URL:** \ **Category:** Rails\ **Created:** [June 14, 2007, 8:37pm UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866 "2007-06-14T20:37:32Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 14, 2007, 8:37pm UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/1 "2007-06-14T20:37:32Z")
Hello, This is my first post to the forum as I’m a new RoR user. I’m trying to decide which login/authentication plugin to use. I suppose defining what I mean by best is a good idea, so I want the plugin that is most compatible with the current ruby and rails versions and is being actively worked on. I’ve installed LoginGenerator and that seems to work fine, but I’ve just come across SaltedHashLoginGenerator that sends forgotten password emails etc, which is a nice feature, but nothing I can’t add myself if the rest of the plugin is not as good as the LoginGenerator. Reading the wiki ([Peak Obsession](http://wiki.rubyonrails.com/rails/pages/) LoginGenerator) the first section looks like a warning, “This article is part of the confusing world of Authentication in Rails. Feel free to get lost in a gazillion of nearly useless and/or outdated Wikipages.”, which doesn’t inspire me at all! Is there better documentation somewhere? Any advice appreciated. -Simon ---
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 14, 2007, 11:29pm UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/2 "2007-06-14T23:29:17Z")
We were using auth\_generator (a login generator) but they are a pain to upgrade though it did include a handful of useful features out the box. We’ve switched to restful\_authentication: [http://agilewebdevelopment.com/plugins/restful\_authentication](http://agilewebdevelopment.com/plugins/restful_authentication) and it has been great. It is based off AAA (Acts\_As\_Authentication) and is easily expandable. ---
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 14, 2007, 11:42pm UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/3 "2007-06-14T23:42:19Z")
On 6/14/07, Marston A. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > We were using auth\_generator (a login generator) but they are a pain > to upgrade though it did include a handful of useful features out the > box. > > We’ve switched to restful\_authentication: > [http://agilewebdevelopment.com/plugins/restful\_authentication](http://agilewebdevelopment.com/plugins/restful_authentication) and it > has been great. It is based off AAA (Acts\_As\_Authentication) and is > easily expandable. I wrote acts\_as\_authenticated and later restful\_authentication, heavily based on the old login\_generator. Most of the conventions were stolen from Tobi 🙂 There’s an old wiki: [http://technoweenie.stikipad.com/plugins/show/Acts+as+Authenticated](http://technoweenie.stikipad.com/plugins/show/Acts+as+Authenticated). The info should still be valid, the plugin has changed very little over the last year or so. – Rick O. [http://lighthouseapp.com](http://lighthouseapp.com) [http://weblog.techno-weenie.net](http://weblog.techno-weenie.net) [http://mephistoblog.com](http://mephistoblog.com) ---
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 15, 2007, 2:40am UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/4 "2007-06-15T02:40:02Z")
Hello, I started to use Act as Autheticated plugin[http://technoweenie.stikipad.com/plugins/show/Acts+as+Authenticated](http://technoweenie.stikipad.com/plugins/show/Acts+as+Authenticated)and it’s solving my problems. 2007/6/14, Simon Holroyd \< removed\_email\_address@domain.invalid\>: > documentation somewhere? > > Any advice appreciated. > > -Simon > > > – Weverton G. de Morais Tecnólogo em Redes de Comunicação Desenvolvedor Delphi Entusiasta Ruby/Rails “Todos juntos somos fortes” ---
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 15, 2007, 10:53am UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/5 "2007-06-15T10:53:04Z")
When you try out AAA and/or Restful Auth, I strongly recommend you read through all the code and understand what it’s doing. Its not that much code and its important (IMO) that you not treat it as a black box. linoj ---
**Author:** ![Simon\_Holroyd](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@Simon\_Holroyd](https://www.ruby-forum.com/u/Simon_Holroyd)\ **Post date:** [June 15, 2007, 9:24pm UTC](https://www.ruby-forum.com/t/login-authentication-which-plugin/106866/6 "2007-06-15T21:24:59Z")
@Simon: Have you tried writing your own as per the “Agile Web D.” book? It’s a good way to start as it will help you better understand how others do authentication. That might help you decide which one to go with. For the record, I use acts\_as\_authenticated a lot.