Agile Web Development with Rails, Edition 5

15.2 Iteration J2: Authenticating Users 14.3 Playtime

15.1 Iteration J1: Adding Users

Scaffold the user model

rails generate scaffold User name:string password:digest
      invoke  active_record
      create    db/migrate/20171113154727_create_users.rb
      create    app/models/user.rb
      invoke    test_unit
      create      test/models/user_test.rb
      create      test/fixtures/users.yml
      invoke  resource_route
       route    resources :users
      invoke  scaffold_controller
      create    app/controllers/users_controller.rb
      invoke    erb
      create      app/views/users
      create      app/views/users/index.html.erb
      create      app/views/users/edit.html.erb
      create      app/views/users/show.html.erb
      create      app/views/users/new.html.erb
      create      app/views/users/_form.html.erb
      invoke    test_unit
      create      test/controllers/users_controller_test.rb
      create      test/system/users_test.rb
      invoke    helper
      create      app/helpers/users_helper.rb
      invoke      test_unit
      invoke    jbuilder
      create      app/views/users/index.json.jbuilder
      create      app/views/users/show.json.jbuilder
      create      app/views/users/_user.json.jbuilder
      invoke  assets
      invoke    coffee
      create      app/assets/javascripts/users.coffee
      invoke    scss
      create      app/assets/stylesheets/users.scss
      invoke  scss
   identical    app/assets/stylesheets/scaffolds.scss

uncomment out bcrypt

edit Gemfile
# Use ActiveModel has_secure_password
gem 'bcrypt', '~> 3.1.7'

Restart the server.

Run the migration

rails db:migrate
mv 20171113154727_create_users.rb 20171113000009_create_users.rb
== 20171113000009 CreateUsers: migrating ======================================
-- create_table(:users)
   -> 0.0006s
== 20171113000009 CreateUsers: migrated (0.0006s) =============================
 

wrap the flash in an if statement

edit app/views/users/index.html.erb
 
<% if notice %>
  <aside class="notice"><%= notice %></aside>
<% end %>
    
 
<h1>Users</h1>
 
<table>
  <thead>
    <tr>
      <th>Name</th>
      <th colspan="3"></th>
    </tr>
  </thead>
 
  <tbody>
    <% @users.each do |user| %>
      <tr>
        <td><%= user.name %></td>
        <td><%= link_to 'Show', user %></td>
        <td><%= link_to 'Edit', edit_user_path(user) %></td>
        <td><%= link_to 'Destroy', user, method: :delete, data: { confirm: 'Are you sure?' } %></td>
      </tr>
    <% end %>
  </tbody>
</table>
 
<br>
 
<%= link_to 'New User', new_user_path %>

Add validation, has_secure_password

edit app/models/user.rb
class User < ApplicationRecord
  validates :name, presence: true, uniqueness: true
  has_secure_password
end

Avoid redirect after create, update operations

edit app/controllers/users_controller.rb
  def create
    @user = User.new(user_params)
 
    respond_to do |format|
      if @user.save
        format.html { redirect_to users_url,
          notice: "User #{@user.name} was successfully created." }
        format.json { render :show, status: :created, location: @user }
      else
        format.html { render :new }
        format.json { render json: @user.errors,
          status: :unprocessable_entity }
      end
    end
  end
edit app/controllers/users_controller.rb
  def update
    respond_to do |format|
      if @user.update(user_params)
        format.html { redirect_to users_url,
          notice: "User #{@user.name} was successfully updated." }
        format.json { render :show, status: :ok, location: @user }
      else
        format.html { render :edit }
        format.json { render json: @user.errors,
          status: :unprocessable_entity }
      end
    end
  end

Display users sorted by name

edit app/controllers/users_controller.rb
  def index
    @users = User.order(:name)
  end

Update form used to both create and update users

edit app/views/users/_form.html.erb
<div class="depot_form">
 
<%= form_with(model: user, local: true) do |form| %>
  <% if user.errors.any? %>
    <div id="error_explanation">
      <h2><%= pluralize(user.errors.count, "error") %>
        prohibited this user from being saved:</h2>
 
      <ul>
      <% user.errors.full_messages.each do |message| %>
        <li><%= message %></li>
      <% end %>
      </ul>
    </div>
  <% end %>
 
  <h2>Enter User Details</h2>
 
  <div class="field">
    <%= form.label :name, 'Name:' %>
    <%= form.text_field :name, id: :user_name, size: 40 %>
  </div>
 
  <div class="field">
    <%= form.label :password, 'Password:' %>
    <%= form.password_field :password, id: :user_password, size: 40 %>
  </div>
 
  <div class="field">
    <%= form.label :password_confirmation, 'Confirm:' %>
 
    <%= form.password_field :password_confirmation,
                            id: :user_password_confirmation,
                            size: 40 %>
    
  </div>
 
  <div class="actions">
    <%= form.submit %>
  </div>
<% end %>
 
</div>
get /users/new
The Pragmatic Bookshelf

New User

Enter User Details

Back

Demonstrate creating a new user

get /users
The Pragmatic Bookshelf

Users

Name

New User
get /users/new
The Pragmatic Bookshelf

New User

Enter User Details

Back
post /users
You are being redirected.
get http://localhost:3000/users
The Pragmatic Bookshelf

Users

Name
dave Show Edit Destroy

New User

Show how this is stored in the database

sqlite3> select * from users
             id = 1
           name = dave
password_digest = $2a$10$MgjT7PsxfMqP5jlkkF5Deu9yULpcZK.MoSSaSiwl.0/5h3AdJVXCO
     created_at = 2017-11-13 15:47:38.581236
     updated_at = 2017-11-13 15:47:38.581236

Update tests to reflect the changes in redirection and uniqueness

edit test/controllers/users_controller_test.rb
  test "should create user" do
    assert_difference('User.count') do
      post users_url, params: { user: { name: 'sam',
      password: 'secret', password_confirmation: 'secret' } }
    end
 
    assert_redirected_to users_url
  end
edit test/controllers/users_controller_test.rb
  test "should create user" do
    assert_difference('User.count') do
      post users_url, params: { user: { name: 'sam',
      password: 'secret', password_confirmation: 'secret' } }
    end
 
    assert_redirected_to users_url
  end

Make sure that all test names are unique

edit test/fixtures/users.yml
# Read about fixtures at
# http://api.rubyonrails.org/classes/ActiveRecord/FixtureSet.html
 
one:
  name: dave
  password_digest: <%= BCrypt::Password.create('secret') %>
 
two:
  name: susannah
  password_digest: <%= BCrypt::Password.create('secret') %>
rails test
Run options: --seed 50854
 
# Running:
 
................................................
 
Finished in 1.594256s, 30.1081 runs/s, 61.4707 assertions/s.
48 runs, 98 assertions, 0 failures, 0 errors, 0 skips

15.2 Iteration J2: Authenticating Users 14.3 Playtime