"Remember Me" feature


#1

Posted by Ben K. (biguniverse) on 28.10.2008 02:28
I realize this has probably been asked on these forums before but I
wanted to get the latest information on what’s available.

We need to implement the typical “Remember Me” checkbox feature you find
for logins on various site.

What’s the best way to do this in Rails 1.2.x and 2.x? Should we use
cookies[] directly? Or, can I use session[]? We need this “remember
me” to be around for at least 2 weeks, maybe even forever (till they
logout).

Thanks.


#2

Hi Ben,

I’m afraid you need to use cookies. But it’s not that hard, really ;),
and is flexible enough. Please note you might not want to store any
sensitive information in cookie also, like username etc. in cleartext

  • maybe setting up special purpose hash in user model, and storing it
    also in cookie is good idea. You need also not to forget about
    situation where user can use “remember me” on multiple computers -
    otherwise your users will complain.

H.


#3

May I reccomend
http://www.thewojogroup.com/2008/09/remember-mes-with-rails/


#4

I always use Restful_Authentication (http://github.com/technoweenie/
restful-authentication). Even if you don’t want to use that, I suggest
you take a look at how it handles it.

HTH


#5

Thanks everyone.