GENERATED, NOT A GEM

Authentication you own.

Rails writes the models, controllers, mailer, tests, and migrations into the application. This page runs that generated code, with a small app-local disable demonstration added on top.

GENERATEDUser + Session models

BCrypt password digest and database-backed sessions.

GENERATEDReset + rate limits

Signed reset tokens and 10 attempts per three minutes.

NOT GENERATEDSignup, MFA, roles

Those remain deliberate application architecture.

ADDED HEREAdmin disable control

disabled_at plus immediate session revocation.

Authentication you own.

Sign in