https://github.com/lazaronixon/authentication-zero
Found an interesting authentication gem for rails; instead of the usual delegation to the gem (where oftentimes you’re not sure what’s actually happening) this instead generates the authentication code so the author is in control of what’s happening.
From the readme:
The purpose of authentication zero is to generate a pre-built authentication system into a rails application (web or api-only) that follows both security and rails best practices. By generating code into the user’s application instead of using a library, the user has complete freedom to modify the authentication system so it works best with their app.