Rails, authlogic and password history
vendorrisk.com client sites use the excellent Authlogic gem to handle user sessions. As we mentioned in the previous blog article, we recently added the ability for site admins to declare that users cannot use a password they’ve used in the past.
After a bit of Googling, I didn’t see any solutions out there for dealing with this issue, so we rolled our own. Here’s how we went about it…
