Secure Tokens From Rails 5 to Rails 4.x and 3.x
Rails 5 introduces (ref rails/rails#18217) a new feature for effortless unique random tokens generation in your models, which can be used for multiple purposes, such as invitations, registrations, password reset emails keys or http token based authentication .
AR::SecureToken uses SecureRandom::base58 to generate a 24-character unique token, keep in mind that the probabilities of collisions are 1 / 58 ** 24, so collisions are highly unlikely. It’s still possible to generate a race condition in the database in the same way that validates_uniqueness_of can, so if you’re extremely paranoid you’re encouraged to add a unique index in the database.
If you cannot wait for Rails 5 release you can start today thanks to the has_secure_token gem. SecureRandom::base58 is also back-ported in the gem.
Lets take a look the code:
Setting your Model
The first step is to run the migration generator in order to add the token key field.
https://gist.github.com/robertomiranda/76b7bf19efe32f25acbc
Then need to run rake db:migrate to update the users table in the database. The next step is to update the model code
https://gist.github.com/robertomiranda/13890a15be3b45e66e7b
To use a custom column to store the token key field you can use the column_name option .
https://gist.github.com/robertomiranda/ffd7b8a42cce9a675148
