Rails设计gem中的密码加密问题

不过,我想我已经找到了答案,尽管它没有我想象的那么漂亮。

首先,在初始化器中创建加密类:

module Devise
  module Encryptors
    class MySha1 < Base
      def self.digest(password, salt)
        Digest::SHA1.hexdigest("#{salt}-----#{password}")
      end

      def self.salt(email)
        Digest::SHA1.hexdigest("#{Time.now}-----#{email}")
      end
    end
  end
end

其次,覆盖用户模型中的一些方法:

# overwrite this method so that we call the encryptor class properly
def encrypt_password
  unless @password.blank?
    self.password_salt = self.class.encryptor_class.salt(email)
    self.encrypted_password = self.class.encryptor_class.digest(@password, self.password_salt)
  end
end

# Because when the database_authenticatable wrote the following method to regenerate the password, which in turn passed incorrect params to the encrypt_password, these overwrite is needed!
def password=(password)
  @password = password
end
def password_digest(pwd)
  self.class.encryptor_class.digest(pwd, self.password_salt)
end

最后,我们要教你什么时候加密密码:

before_save :encrypt_password

我不确定这有多古老,但这似乎是一个更好的方法: http://presentations.royvandewater.com/authentication-with-devise.html#9