Ask HN: Authentication with Angular/Rails?

7 points·pastagami··7 comments

I know there are many companies developing with Angular and Rails (and many looking to hire for this as well).

How are you managing authentication (securely)?

This sounds like a specific question how to solve a problem in one programming language. Wouldn't a question on stackoverflow be better?

(Afaik most Rails projects use https://github.com/plataformatec/devise/ which takes care of database setup, password hashes, session cookies, even forgot-password feature and Facebook/Twitter/Google+ logins.)

Angular and Rails are frameworks that leave the decision of authentication up to you.

You can do token authentication, basic authentication, OAuth, OAuth2, or even roll your own. For a rails api <-> angular combo, I usually stick to token or OAuth 1/2 authentication.

I have open sourced an angular application (technically ionic but it uses angular under the hood) and the rails api that it uses as a backend which uses token authentication. https://github.com/johnkelly/mojave https://github.com/johnkelly/kalahari

I like using Token based authentication + HTTPS. Using Rails (or nodejs, or whatever you want) and redis to store the tokens on the back-end. Here's an article about it: http://www.kdelemme.com/2014/03/09/authentication-with-angul...

Disclaimer: I'm the author.

I use cookie based authentication, like houndci.com https://github.com/thoughtbot/hound I think token based authentication (rails-api) is better, but most of my technical background is rails.

Check out Satellizer, it has token + OAUTH authentication for Angular. https://github.com/sahat/satellizer

This looks promising https://github.com/cloudspace/angular_devise

Are there any gems/methods that combine authentication along with multitenancy in a turnkey solution? (Devise + Apartment)

Reply on news.ycombinator.com