Kiskeのブックマーク - はてなブックマーク

Is Your Site Leaking Password Reset Links?
Self-service password resets are a common part of many web applications. The typical password reset link is em ailed to the user and contains a unique token that in some manner identifies the user. By clicking the link, the user proves they have access to the em ail associated to the account, and has now authenticated using a second factor. At this point, they are asked to provide a new password. If
Kiske 2017/02/09
security
リンク
End-to-End Testing with RSpec Integration Tests and Capybara
Stability can become an issue as web applications evolve and grow – integration tests provide a great way to perform end-to-end tests that validate the application is performing as expected. Integration test with RSpec and Capybara When writing integration tests, try to model the test around an actor (user of the system) and the action they are performing. # spec/features/visitor_signs_up_spec.rb
Kiske 2015/02/25
リンク
Using Polymorphism to Make a Better Activity Feed in Rails
You won’t find “polymorphic partials” in Rails’ API documentation. However, the general programming technique of polymorphism can be applied to Rails partials. Example: an activity feed for an eBay marketplace Imagine you are signed into an application similar to eBay. You can buy or sell it ems on the marketplace. In order to buy an it em, you need to bid on it. You see an activity feed that includ
Kiske 2014/08/06
rails
リンク
1