jhuckabee / backbone_devise

An example Rails app that uses a Backbone.js UI for user signup, authentication, and password retrieval.

Backbone.js Authentication UI with Ruby on Rails and Devise

This is an example application that implements a user regisration, authentication, and password retrieval user interface using Backbone.js, Ruby on Rails, and Devise.

The front end also takes advantage of a few additional Backbone support libraries which include:

• backbone.marionette
• backbone.modelbinder
• backbone-rails's Backbone.sync implementation

Demo Application

A demo application can be found at http://backbonedevise.herokuapp.com

Local Installation

1. Clone the repository

git clone git://github.com/jhuckabee/backbone_devise.git

2. Configure your database in config/database.yml. The current config assumes a custom local PostgreSQL configuration.

   vi config/database.yml

3. Migrate the database

   rake db:migrate

4. Start your webserver

rails server

Tests

Integration tests have been written using Capybara and Selenium

Run the tests using

rake test

backbone_devise's Issues

Using :get to sign_out may create insecurity

I ran into an issue described here

http://stackoverflow.com/questions/9362910/rails-warning-cant-verify-csrf-token-authenticity-for-json-devise-requests

Sign in, then out, then back in fails because the csrf token has expired (or something). I noticed you solved this by signing out using :get in your devise.rb initializer. Which is described as being a bad idea here:

http://stackoverflow.com/questions/941594/understand-rails-authenticity-token

I was wondering if you have found a more secure method, as suggested in the SO question?
Overriding and passing a new token each request seems like the best idea. Though, I am still unsure the best way to go about implementing it.

P.S.
Cheers, for this project. It is the best example of how to interact with Devise over json that I could find.

Login, Signup etc fails when I clean out the /public/assets folder

Hi Josh,

Thanks for this, I am reasonaby comfortable with Backbone now, just moving onto Marionette and this seems to be a great project to pick apart to learn it.

Just curious as to why when I delete out the javascript and css from /public/assets, all the login functionality stops working.

Work when it is in there, fails when it is gone.

I am trying various things, such as including all the required js files from a ./utils folder in /assets/javascripts but no joy.

I can't see how some of the files such as ( I changed to coffeescript)

= require underscore

= require underscore.string

= require backbone

= require backbone.sync.rails

= require backbone.modelbinder

= require backbone.marionette

are being included.

There seems to be no gems that load these into the asset pipeline.

I am missing something obvious I think.

Any thoughts/suggestions?

Cheers,

Luke