Category: Security

• Authorization

  Uses a simple authorization DSL that delegates checks to models, including the current user. Different levels of authorization complexity are provided through mixins available with the plugin.

• base-auth

  Best Authorization System Ever

• Blubber

  A small but usable Authentication/ACL system for Rails

• BrainBuster

  A logic captcha for Rails. Use simple logic questions instead of images for a friendlier, accessible anti spam solution.

• Can touch this

  Permissions system for Rails applications, extracted from rboard

• CAS Authentication Filter

  Enables authentication against a Centralized Authentication Service (CAS) server.

• Ciphermail

  CipherMail provides a safe alternative to the mail_to helper by hiding mailto links from e-mail harvesting bots. The generated output is completely obfuscated by a 1024 bit random key. They keyword is stored on the server, so it is never revealed to the client. Processing is performed on the server-side via an AJAX request and the decrypted redirect is returned to the client, opening a mail composer window… just like normal mailto link.

• Crumblr

  Crumblr, a Ruby on Rails plugin to protect against Cross-Site Request Forgery

• Cryptid

  Rails Plugin that enables RESTful Resources to be routed by cryptic ids

• CSRF Killer

  This plugin helps protect against possible CSRF attacks

• declarative_authorization

  Authorization the declarative way: keep authorization rules out of your program code, improve maintainability and use the policies to talk to domain experts.

• dnsbl_check

  dnsbl_check is a Rails plugin that checks every incoming request to see if the client is listed on a DNS Blackhole List. This helps prevent abuse from spammers/crackers.

• Easy Access

  Easy access control and roles for CRUD operations.

• Encrypted cookie store

  EncryptedCookieStore for Ruby on Rails 2.3

• FilePermissions

  Allows you to fine-tune permissions of files in your public directory directly from Rails.

• Form Spam Protection :)

  Tired of form spam but don't like the idea of Captcha or an ineffective RBL? This plugin transparently protects your forms and all the user needs is Javascript enabled

• HTPasswd

  This plugin allows controllers to use HTTP Basic and Digest access authentication.

• JiffAuth

  An alternative (to popular restful_authentication) authentication plugin for Rails

• Less Reverse Captcha

  The Less Reverse Capchta creates a captcha that is invisible to the user.

• Mac

  This plugin provides Model Security with the "Security in Depth" approach. It accomplishes this task simply by allowing you to intercept method calls and activerecord callbacks and run arbitrary code.