I have used a sha256 hashing algorithm in order to provide some security to my login facility. I now want to create a facility whereby, if the user forgets their password, they are emailed a temporary password so that they can login. Has anyone had any experience implementing this? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
On Wed, Feb 11, 2009 at 11:35 PM, Shockmeister <B00020046-oe7qfRrRQfe0UHL9wTsh4w@public.gmane.org>wrote:> > I have used a sha256 hashing algorithm in order to provide some > security to my login facility. I now want to create a facility > whereby, if the user forgets their password, they are emailed a > temporary password so that they can login. Has anyone had any > experience implementing this? > > >Generally if you''re using a hash to store the password, then you will need to send users to a page where they can enter a new password. You can do this by generating a temporary token (random value) that you include in a url you mail to the user and set it to expire within a few minutes of being generated. Make sure it''s enough time for the password to be reset. Andrew Timberlake http://ramblingsonrails.com http://www.linkedin.com/in/andrewtimberlake "I have never let my schooling interfere with my education" - Mark Twain --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
Lovd does just that, take a look at: lovdbyless.com http://github.com/stevenbristol/lovd-by-less/tree/master Cheers, Sazima On Feb 11, 7:35 pm, Shockmeister <B00020...-oe7qfRrRQfe0UHL9wTsh4w@public.gmane.org> wrote:> I have used a sha256 hashing algorithm in order to provide some > security to my login facility. I now want to create a facility > whereby, if the user forgets their password, they are emailed a > temporary password so that they can login. Has anyone had any > experience implementing this?--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
Cheers Sazima thats a great help! On Feb 12, 7:25 pm, Sazima <rsaz...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:> Lovd does just that, take a look at: > > lovdbyless.com > > http://github.com/stevenbristol/lovd-by-less/tree/master > > Cheers, Sazima > > On Feb 11, 7:35 pm, Shockmeister <B00020...-oe7qfRrRQfe0UHL9wTsh4w@public.gmane.org> wrote: > > > > > I have used a sha256 hashing algorithm in order to provide some > > security to my login facility. I now want to create a facility > > whereby, if the user forgets theirpassword, they are emailed a > > temporarypasswordso that they can login. Has anyone had any > > experience implementing this?- Hide quoted text - > > - Show quoted text ---~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---