Generating a unique token for invitation system. Anything I'm missing?

[brenogazzola]

@BenKoshy I have a complete explanation of how this feature works in another thread in the here:

Rails 7.1: Interesting Feature PRs

We deploy rails edge to production, so are constantly reading PRs that were merged. I just stumbled on a cool one and though it would be nice share it and maybe other future PRs Link What does it do? Generate a single use token without needing an extra database field to track it. Sample Code: class User < ActiveRecord::Base has_secure_password generates_token_for :password_reset do # BCrypt salt changes when password is updated BCrypt::Password.new(password_digest).salt[-10..…

The basic idea is that the method uses the record id and the name you pass it to generate an encrypted value, that it can then decrypt and compare back with the id. You can even pass it a block with some additional data for verification. This is useful if you want the token to stop working after something changes in the record.