Authentication with Sorcery, RSpec, and Rails 7: Building a simple Rails CMS - Part 1

• wizardcms

  1 1 0.0 Ruby

  A Rails 7 app showcasing authentication with Sorcery, tested with RSpec

Source code on GitHub

• Sorcery

  10 1,413 5.8 Ruby

  Magical Authentication (by Sorcery)

  

We'll be installing Sorcery based off this tutorial in their wiki. I'm modifying a little bit since we are creating something different, but also because their tutorial is a bit outdated since it is based off an older version of Rails.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• rails-ujs

  2 10 10.0

  Discontinued Ruby on Rails unobtrusive scripting adapter

  

Prior to Rails 7, when you would want to log out or destroy a resource (a post or image), you would write <%= link_to "Sign out", destroy_user_session_path, method: :delete %>. The method: :delete part relied on an old library, rails-ujs and it helped make NON-Get requests from hyperlinks. Now with Turbo, the solution is to add data: { "turbo-method": :delete } so you don't get an error saying the link_to helper was looking for a GET resource. However, Turbo is not handling the redirect as we expect it, or at all, we need to explicitly say we want a 303 redirect so we add status: :see_other as an option in our destroy action.

Suggest a related project