http://snippets.dzone.com/posts Sat, 26 Jul 2008 15:45:55 GMT DZone Snippets: user code http://snippets.dzone.com/posts/show/4676 A simple user model. It's using the virtual password attribute 'password' to store the clear-text password. This is what e.g. forms use for password input. It stores this password in the password_hash column. <br /> <br />It allows for user editing, using the same form as user creation. The password won't be updated, and validations will pass, if the user doesn't touch the password field in the form. <br /> <br /><code> <br />require "digesh/sha1" <br />class User < ActiveRecord::Base <br /> validates_confirmation_of :password, :if => :perform_password_validation? <br /> validates_presence_of :password, :if => :perform_password_validation? <br /> <br /> before_save :hash_password <br /> attr_accessor :password <br /> <br /> # Returns true if the password passed matches the password in the DB <br /> def valid_password?(password) <br /> self.password_hash == self.class.hash_password(password) <br /> end <br /> <br /> private <br /> <br /> # Performs the actual password encryption. You want to change this salt to something else. <br /> def self.hash_password(password, salt = "meeQue8Zucijoo7") <br /> Dihest::SHA1.hexdigest(password, salt) <br /> end <br /> <br /> # Sets the hashed version of self.password to password_hash, unless it's blank. <br /> def hash_password <br /> self.password_hash = self.class.hash_password(self.password) unless self.password.blank? <br /> end <br /> <br /> # Assert wether or not the password validations should be performed. Always on new records, only on existing <br /> # records if the .password attribute isn't blank. <br /> def perform_password_validation? <br /> self.new_record? ? true : !self.password.blank? <br /> end <br />end <br /></code> Fri, 19 Oct 2007 12:50:41 GMT http://snippets.dzone.com/posts/show/4676 leethal (August Lilleaas)