# Modern day auth **URL:** \ **Category:** Rails\ **Created:** [May 22, 2009, 9:32pm UTC](https://www.ruby-forum.com/t/modern-day-auth/168612 "2009-05-22T21:32:39Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![bouldr-matt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85e7bf/32.png) [@bouldr-matt](https://www.ruby-forum.com/u/bouldr-matt)\ **Post date:** [May 22, 2009, 9:32pm UTC](https://www.ruby-forum.com/t/modern-day-auth/168612/1 "2009-05-22T21:32:39Z")
It’s been quite a while since I last rolled out a rails app, and now I have to start on another. I’m wondering what is the currently accepted method for implementing authentication and authorisation. My last apps used a fairly well modified version of restful\_authentication, which as I remember was a right PITA to install into a new application. It mainly consisted of several hours of copying and pasting from existing apps (installing it from scratch was even slower due to my modifications). Has anyone got any advice for making my life a little easier? I don’t have any wild requirements: - Session based login/logout with forms - Ability for users to reset passwords with email tickets - Possibility to switch between admin-only or open registration (with email confirmations) - Maybe a nice management interface All that was implemented with my modified restful\_auth, but as I keep moaning, it took far too long to redo for each app. Any tips greatly appreciated. ~Matt ---
**Author:** ![bouldr-matt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85e7bf/32.png) [@bouldr-matt](https://www.ruby-forum.com/u/bouldr-matt)\ **Post date:** [May 22, 2009, 10:08pm UTC](https://www.ruby-forum.com/t/modern-day-auth/168612/2 "2009-05-22T22:08:04Z")
Check Authlogic ([http://www.binarylogic.com](http://www.binarylogic.com)). But I advise you to take a very good look at the code and docs because it makes a lot of trade-offs in order to make it a “plug-and-play” gem instead of a generator.