I don't understand this point of view. Isn't that the type of thing a new dev is very likely to get wrong and get burned by?
Not that integrating Devise when you're new to Rails is all that much fun either.
Not that integrating Devise when you're new to Rails is all that much fun either.
> Isn't that the type of thing a new dev is very likely
> to get wrong and get burned by?
Hand-rolling your own authentication is trivial in Rails. There are plenty of good tutorials and blog posts about it. There's even a Railscast on it. Rails even has a secure password helper and a digest generator.
You're more likely to get burned by Devise when you want to make trivial customizations to it. You quickly get weird override methods in your User model and rigid behavior from code you can't grep.
I think rolling your own authentication is far more newb-friendly. You're only a handful of lines away from your own `current_user` helper, and you retain full control.