stevepolitodesign

class UsersController
  def index
    @users = User.all
    
    respond_to do |format|
      format.html
      format.json { render json: @users.as_json }
    end
 end

stevepolitodesign

rails g model session user:references

Before

class CreateSessions < ActiveRecord::Migration[6.1]
  def change
 create_table :sessions do |t|

stevepolitodesign

 require_relative "boot"

 require "rails/all"

 # Require the gems listed in Gemfile, including any gems
 # you've limited to :test, :development, or :production.
 Bundler.require(*Rails.groups)

 module Redirect2Link

stevepolitodesign

Before

# app/controllers/concerns/authorizable.rb
module Authorizable
  extend ActiveSupport::Concern

  included do
    def authorize_request(from:, against:)
      if from != against

stevepolitodesign

class Webpage < ApplicationRecord

  def self.delete_all
    raise ActiveRecord::DeleteRestrictionError
  end

  def delete
    destroy
  end

stevepolitodesign

Association Extensions

An API for adding new finders, creators, and other factory-type methods that are only used as part of this association.

class AnonymousSession < ApplicationRecord
  has_many :webpages, as: :owner do
    def nullify_owners
      # records returns an array of webpages
 records.each(&amp;:nullify_owner)

stevepolitodesign

1. Make sure sprockets-rails is installed. This wasn't the case when using Rails 7.0.0.alpha2. I think this was the most important step.

# Gemfile
gem "sprockets-rails"

2. Add preload: true to the necessary assets. I'm just copying the default Rails 7.0.0 config. This differs from the original Rails 7.0.0.alpha2 install.

stevepolitodesign

class Webpage < ApplicationRecord
  has_one_attached :open_graph_image

  validate :open_graph_image_content_type
  validate :open_graph_image_size

  private

  def open_graph_image_content_type

stevepolitodesign

Rails 7 introduces the authenticate_by class method which prevents timing-based enumeration attacks. This is an alternative to calling authenticate on an instance of a User.

class User < ActiveRecord::Base
  has_secure_password
end

Before

stevepolitodesign

Before

class PostsController < ApplicationController
  def create
    if @post.save(post_params)
      redirect_to @post
    else
      render :new
 end