Action Policy
request_migrations
Our great sponsors
| Action Policy | request_migrations | |
|---|---|---|
| 10 | 12 | |
| 1,333 | 94 | |
| - | - | |
| 5.7 | 5.5 | |
| 10 days ago | 5 months ago | |
| Ruby | Ruby | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Action Policy
-
Using Action Policy for a Ruby on Rails App: The Basics
Action Policy is a flexible, extensible, and performant authorization framework for Ruby and Rails apps. It uses multiple caching strategies out of the box, making it very fast, especially if your authorization rules require database queries.
-
Pundit VS Action Policy - a user suggested alternative
2 projects | 2 Jul 2023
Action Policy is the latest Authorization framework I've seen recommended. What is more, it is maintained by the nice and experienced team from Evil Martians.
-
GitHub - keygen/api: an open, source-available software licensing and distribution API built with Ruby on Rails
Lots of goodies here, such as token authentication, role- and permission-based authorization (including a move from Pundit to ActionPolicy), and how I test the API end-to-end using *raises flame shield* Cucumber.
- Authentication, Roles, and Authorization... oh my.
-
Five Ruby Gems for Authentication and Authorization
Also, ActionPolicy is better than Pundit for most applications. Give it a try.
-
Concerns about authorization when going in production
Use Action Policy or Pundit, and write tests for your policies. Authz is worth testing with near complete coverage.
- Service Objects (with dry-monads) and authorization
-
Access control gem for your Rails application (the 2nd)
You may ask what's makes Active Entry better or different from other gems like Pundit, Action Policy (especially), or CanCanCan.
-
Rails: How to Reduce Friction at the Authorization Layer
At work, we've recently faced similar issues and moved to ActionPolicy as a result. It's designed slightly differently, but there is a lot of overlap with what John came up with.
request_migrations
-
GitHub - keygen/api: an open, source-available software licensing and distribution API built with Ruby on Rails
request_migraitons
- Request and response migrations for Stripe-like versioning of your Rails API
- GitHub - keygen-sh/request_migrations: Write request and response migrations for Stripe-like versioning of your Ruby on Rails API
-
Breaking Things Without Breaking Things
Hey all -- this is a story about REST API versioning and how, sometimes, you get things really (really) wrong. The post goes over what I did to dig myself out of a pretty bad hole, caused by a bad design choice. It also introduces a new gem I wrote, called request_migrations, which handles API version migrations for Rails apps [0].
[0]: https://github.com/keygen-sh/request_migrations
- request_migrations - request and response migrations for Rails API versioning
- request_migrations - request and response migrations for versioning a Rails API
- request_migrations - request and response migrations for your Ruby on Rails API
- request_migrations - request and response migrations for your Rails API
What are some alternatives?
Pundit - Minimal authorization through OO design and pure Ruby classes
good_job - Multithreaded, Postgres-based, Active Job backend for Ruby on Rails.
CanCanCan - The authorization Gem for Ruby on Rails.
Exception Handler - Ruby on Rails Custom Error Pages
rolify - Role management library with resource scoping
typed_params - An alternative to Rails strong_parameters. Define structured and strongly-typed parameter schemas for your Rails controllers.
jay_doubleu_tee - A JWT authorization middleware for any web application.
searq.org - SearQ, the RSS search engine that is both speedy and free! SearQ offers a RESTful API that simplifies the search for data from RSS feeds. Finding what you need has never been easier with SearQ.
AccessGranted - Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
api_guard - JWT authentication solution for Rails APIs
Declarative Authorization - An unmaintained authorization plugin for Rails. Please fork to support current versions of Rails
active_entry - A flexible access control system for your Rails app