search

heartsentwined / ember-auth-rails-demo

rails + devise + ember-auth demo site
121 stars 16 forks source link

Devise Token Authentication is Deprecated #10

Closed DVG closed 10 years ago

DVG commented 10 years ago

The devise team has removed Token Authentication from it's list of modules, citing that the module can be vunerable to timing attacks. They have some suggested alternatives in this gist: https://gist.github.com/josevalim/fb706b1e933ef01e4fb6

Wanted to make you aware so the demo could be updated.

heartsentwined commented 10 years ago

It is indeed deprecated. There are also notes specifically in the wiki that addresses this.

DVG commented 10 years ago

Ah, my bad, I missed the note in the header.