columbusrb / columbusrb.com

Columbus Ruby Brigade -- Columbus OH's finest Rubyists, together the third monday of every month!
http://columbusrb.com
19 stars 35 forks source link

Google Auth for Admin #89

Closed jesscanady closed 4 years ago

jesscanady commented 4 years ago

What

Using Basic Auth for our admin stuff means that we have to distribute a password to anyone who should have access. Also we have to rotate the password and re-distribute in the case that we need to revoke access.

But hey we have G Suite for our nonprofit and maybe we could just log in with those users?

How

The omniauth-google-oauth2 gem and a few modifications to our previously-unused devise setup.

Development notes

In the development environment, we now seed an admin user and use regular devise user auth, which we do not use in production.