From 1c17c01626be72b7892b39431b92463b8a7b88c3 Mon Sep 17 00:00:00 2001 From: Adrien Lamothe Date: Sun, 4 Aug 2013 00:38:47 -0700 Subject: Added to 'Security' section; especially reference to 'Ruby on Rails Security Guide'. [ci skip] --- guides/source/getting_started.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'guides/source') diff --git a/guides/source/getting_started.md b/guides/source/getting_started.md index 20d7eb3381..12eb88f018 100644 --- a/guides/source/getting_started.md +++ b/guides/source/getting_started.md @@ -1616,6 +1616,8 @@ end Security -------- +### Basic Authentication + If you were to publish your blog online, anybody would be able to add, edit and delete posts or delete comments. @@ -1663,6 +1665,19 @@ Authentication challenge ![Basic HTTP Authentication Challenge](images/getting_started/challenge.png) +Other authentication methods are available for Rails applications. Two popular +authentication add-ons for Rails are the [Devise](https://github.com/plataformatec/devise) +rails engine and the [Authlogic](https://github.com/binarylogic/authlogic) gem, +along with a number of others. + + +### Other Security Considerations + +Security, especially in web applications, is a broad and detailed area. Security +in your Rails application is covered in more depth in +The [Ruby on Rails Security Guide](security.html) + + What's Next? ------------ -- cgit v1.2.3