Drop in authorization and authentication suite for Rails APIs. Features include user registration, stateless authentication using OAuth2, roles and permissions, password reset workflow, guest access, policy enforcement, JSON API serialization, two-factor authentication support, an...

Password Breach Alert is a Devise extension that adds 1) server-side check of password strength before registration, using a list of common passwords, zxcvbn and haveibeenpwned; 2) a way to check users emails against recent verified security breaches, and implement different custo...

Generated strong password meets OWASP security requirement.