How to check the password from the database with the new password for a match in Rails?

Question

Ruby on Rails

There is a password from the form: params[:user][:password]
I want to check if the password from the database matches. The password in the database is stored in a hashed form (via bcrypt), and, accordingly, it is impossible to check the password in this way:

@user = User.where(password: params[:user][:password]).first

How can I solve the problem???

Answer 1

Solved the problem with simple usage:

password = params[:user][:password]
User.find_by(id:user_id).try(:authenticate, password)

Answer 2

Read this: https://github.com/codahale/bcrypt-ruby for how to use bcrypt in Rails

Answer 3

something like this

def self.authenticate(email, password)
    user = find_by_email(email)
    if user && user.password_hash == BCrypt::Engine.hash_secret(password, user.password_salt)
      user
    else
      nil
    end
  end