Rails, Angular, Postgres, and Bootstrap, 2nd Edition

Next: Using Postgres to Make Our Login More Secure

Devise cannot absolutely prevent users from being added into our database that do not meet our security criteria. For example, Active Record provides the method update_attribute, which skips validations and could be used to insert a user with any email address into the USERS table. What we need is for the data layer itself to enforce our requirements. Postgres’s check constraints can do this.

Footnotes

[19]

https://github.com/plataformatec/devise

[20]

http://guides.rubyonrails.org/action_mailer_basics.html#action-mailer-configuration

[21]

http://guides.rubyonrails.org/command_line.html#rails-generate

[22]

http://guides.rubyonrails.org/command_line.html#rails-dbconsole

[23]

http://guides.rubyonrails.org/engines.html ...