danday
Purpose of plug :ensure_user_confirmed in "Security considerations of the LiveView model"?
Hi! I am not sure I understand the concept of “confirming” a user in the example given in “Security considerations of the LiveView model”: Security considerations — Phoenix LiveView v1.2.5
plug :ensure_user_authenticated
plug :ensure_user_confirmed
Is the step “confirming” a user akin to verifying their identity via email confirmation or phone number? Or does it have more to do with roles, like a user’s permissions to access certain paths?
Thank you!
Marked As Solved
APB9785
phx_gen_auth generates some boilerplate around sending confirmation emails to each user and saving the status to your database. I’d imagine many apps would restrict account functionality for unconfirmed users, and for those apps, a plug like :ensure_user_confirmed would check the DB for the user’s confirmation status before allowing them to take a specific action - such as create a new post, or view private content.
Also Liked
josevalim
Yup. In any case, what ensure_user_confirmed does is not quite the point of that section. But rather that any user treatment done in your plug must also be done in your LiveView. Of course, if you only have LiveViews, then you only need to do it in the LiveView.
danday
Popular in Questions
Other popular topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Develop your skills with books, videos, and courses.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #supervisor
- #advent-of-code
- #elixirconf-us
- #distillery
- #processes
- #forms
- #api
- #metaprogramming
- #security
- #performance
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking for Elixir devs who love to ship. Start your free account.
Practical resources that improve the lives of professional developers.
Develop your skills with books, videos, and courses.
Producing high quality Elixir screencasts since 2017.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"