About the Reminders App

The purpose of this project is to practice implementing secure session management. It is built using Ruby on Rails. This app uses the popular Devise authentication framework to handle secure sessions.

Dependencies

This program requires the following software to run: Note: This project was created on a Windows machine. Dependencies may vary based on your operating system.

• Ruby 2.1.5
• Rails 4.1
• Bundler
• Git
• Sqlite
• Devkit
• TinyTDS

These dependencies can be easily installed using the Rails Installer

Start the App:

1. Clone or copy this repository to your local machine

2. Open up a command prompt, and change directory so that you are at the reminders directory. Your working directory should now look something like:

   \PATH\TO\reminders

3. Install gem dependencies for the app by typing:

   bundle install

4. Start the server by typing:

   rails server

5. Access the app by opening up a web browse and navigating to http://localhost:3000

Try out the App:

By default, this app come with two pre-made users and a reminder belonging to each:

User 1:

Email: [email protected]
Password: 12345678
Has made a reminder called "Reminder 1"

User 2:

Email: [email protected]
Password: 12345678
Has made a reminder called "Reminder 2"

You can test the users by logging in with the above credentials.

To test the security of the system, perform the following checks:

1. Confirm that each user can access their own reminders by attempting to edit the reminder belonging to themselves.

2. Confirm that a user cannot access another user's reminders by attempting to edit a reminder not belonging to the user. To do this, simply edit the URL and change the reminder ID to a reminder not belonging to that user. For example, user2 has access to the reminder with an ID of 2, so visiting http://localhost:3000/reminders/2/edit while logged in as user2 works. However, visiting http://localhost:3000/reminders/1/edit would not work because reminder 1 does not belong to that user. The same holds true for user1.

3. Confirm that trying to access any resources while not logged in does not work. For example, visiting http://localhost:3000/reminders should not work.

Run the test suite:

This app comes with 3 tests for the Reminders controller. These tests ensure that user authentication is working as intended. The tests are created with the Rspec Rails testing framework. Test fixtures are created using the FactoryGirl gem.

The default test suite provided is as follows:

1. The first test checks that users who are not logged in are redirected to the login page when trying to access any resource from this applicaiton.

2. The second test checks that users who are logged in are able to access their own reminders.

3. The third test checks that users who are logged in are not able to access other users' reminders.

To run the test suite, you must first clone or download the source code for this application to your local machine. Then, open up a command prompt, and change directory so that you are at the reminders directory. Your working directory should now look something like:

\PATH\TO\reminders

Ensure that you have installed all gem dependencies for the app by typing:

bundle install

Then simply type the following to run the Rspec tests:

bundle exec rspec

The tests should run successfully and produce an output like:

Finished in 0.12459 seconds (files took 10.93 seconds to load)
3 examples, 0 failures