Rails ガイド

 $ bin/rails g migration AddNamesToUsers first_name:string last_name:string 

 $ bin/rails db:migrate 

 class User < ApplicationRecord has_secure_password has_many :sessions, dependent: :destroy normalizes :email_address, with: ->(e) { e.strip.downcase } validates :first_name, :last_name, presence: true def full_name "#{first_name} #{last_name}" end end 

 resource :session resources :passwords, param: :token resource :sign_up 

 class SignUpsController < ApplicationController def show @user = User.new end end 

 <h1>Sign Up</h1> <%= form_with model: @user, url: sign_up_path do |form| %> <% if form.object.errors.any? %> <div>Error: <%= form.object.errors.full_messages.first %></div> <% end %> <div> <%= form.label :first_name %> <%= form.text_field :first_name, required: true, autofocus: true, autocomplete: "given-name" %> </div> <div> <%= form.label :last_name %> <%= form.text_field :last_name, required: true, autocomplete: "family-name" %> </div> <div> <%= form.label :email_address %> <%= form.email_field :email_address, required: true, autocomplete: "email" %> </div> <div> <%= form.label :password %> <%= form.password_field :password, required: true, autocomplete: "new-password" %> </div> <div> <%= form.label :password_confirmation %> <%= form.password_field :password_confirmation, required: true, autocomplete: "new-password" %> </div> <div> <%= form.submit "Sign up" %> </div> <% end %> 

 class SignUpsController < ApplicationController def show @user = User.new end def create @user = User.new(sign_up_params) if @user.save start_new_session_for(@user) redirect_to root_path else render :show, status: :unprocessable_entity end end private def sign_up_params params.expect(user: [ :first_name, :last_name, :email_address, :password, :password_confirmation ]) end end 

 module Authentication extend ActiveSupport::Concern included do before_action :require_authentication helper_method :authenticated? end class_methods do def allow_unauthenticated_access(**options) skip_before_action :require_authentication, **options end def unauthenticated_access_only(**options) allow_unauthenticated_access **options before_action -> { redirect_to root_path if authenticated? }, **options end # ... 

 class SignUpsController < ApplicationController unauthenticated_access_only # ... end 

 class SignUpsController < ApplicationController unauthenticated_access_only rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to sign_up_path, alert: "Try again later." } # ... end 

 namespace :settings do resource :password, only: [ :show, :update ] end 

 class Settings::PasswordsController < ApplicationController def show end end 

 <h1>Password</h1> <%= form_with model: Current.user, url: settings_password_path do |form| %> <% if form.object.errors.any? %> <div><%= form.object.errors.full_messages.first %></div> <% end %> <div> <%= form.label :password_challenge %> <%= form.password_field :password_challenge, required: true, autocomplete: "current-password" %> </div> <div> <%= form.label :password %> <%= form.password_field :password, required: true, autocomplete: "new-password" %> </div> <div> <%= form.label :password_confirmation %> <%= form.password_field :password_confirmation, required: true, autocomplete: "new-password" %> </div> <div> <%= form.submit "Update password" %> </div> <% end %> 

 class Settings::PasswordsController < ApplicationController def show end def update if Current.user.update(password_params) redirect_to settings_profile_path, status: :see_other, notice: "Your password has been updated." else render :show, status: :unprocessable_entity end end private def password_params params.expect(user: [ :password, :password_confirmation, :password_challenge ]).with_defaults(password_challenge: "") end end 

 en: hello: "Hello world" products: index: title: "Products" activerecord: attributes: user: password_challenge: "Current password" 

 namespace :settings do resource :password, only: [ :show, :update ] resource :profile, only: [ :show, :update ] root to: redirect("/settings/profile") end 

 class Settings::ProfilesController < ApplicationController def show end def update if Current.user.update(profile_params) redirect_to settings_profile_path, status: :see_other, notice: "Your profile was updated successfully." else render :show, status: :unprocessable_entity end end private def profile_params params.expect(user: [ :first_name, :last_name ]) end end 

 <h1>Profile</h1> <%= form_with model: Current.user, url: settings_profile_path do |form| %> <% if form.object.errors.any? %> <div>Error: <%= form.object.errors.full_messages.first %></div> <% end %> <div> <%= form.label :first_name %> <%= form.text_field :first_name, required: true, autocomplete: "given-name" %> </div> <div> <%= form.label :last_name %> <%= form.text_field :last_name, required: true, autocomplete: "family-name" %> </div> <div> <%= form.submit "Update profile" %> </div> <% end %> 

 <!DOCTYPE html> <html> <head> <%# ... %> </head> <body> <div class="notice"><%= flash[:notice] %></div> <div class="alert"><%= flash[:alert] %></div> <nav class="navbar"> <%= link_to "Home", root_path %> <% if authenticated? %> <%= link_to "Settings", settings_root_path %> <%= button_to "Log out", session_path, method: :delete %> <% else %> <%= link_to "Sign Up", sign_up_path %> <%= link_to "Login", new_session_path %> <% end %> </nav> 

 <%= content_for :content do %> <section class="settings"> <nav> <h4>Account Settings</h4> <%= link_to "Profile", settings_profile_path %> <%= link_to "Password", settings_password_path %> </nav> <div> <%= yield %> </div> </section> <% end %> <%= render template: "layouts/application" %> 

 <!DOCTYPE html> <html> <head> <%# ... %> </head> <body> <div class="notice"><%= flash[:notice] %></div> <div class="alert"><%= flash[:alert] %></div> <nav class="navbar"> <%= link_to "Home", root_path %> <% if authenticated? %> <%= link_to "Settings", settings_root_path %> <%= button_to "Log out", session_path, method: :delete %> <% else %> <%= link_to "Sign Up", sign_up_path %> <%= link_to "Login", new_session_path %> <% end %> </nav> <main> <%= content_for?(:content) ? yield(:content) : yield %> </main> </body> </html 

 nav.navbar { justify-content: flex-end; display: flex; font-size: 0.875em; gap: 0.5rem; max-width: 1024px; margin: 0 auto; padding: 1rem; } nav.navbar a { display: inline-block; } 

 section.settings { display: flex; gap: 1rem; } section.settings nav { width: 200px; } section.settings nav a { display: block; } 

 class Settings::BaseController < ApplicationController layout "settings" end 

 class Settings::PasswordsController < Settings::BaseController 

 class Settings::ProfilesController < Settings::BaseController 

 namespace :settings do resource :password, only: [ :show, :update ] resource :profile, only: [ :show, :update ] resource :user, only: [ :show, :destroy ] root to: redirect("/settings/profile") end 

 class Settings::UsersController < Settings::BaseController def show end def destroy terminate_session Current.user.destroy redirect_to root_path, notice: "Your account has been deleted." end end 

 <h1>Account</h1> <%= button_to "Delete my account", settings_user_path, method: :delete, data: { turbo_confirm: "Are you sure? This cannot be undone." } %> 

 <%= content_for :content do %> <section class="settings"> <nav> <h4>Account Settings</h4> <%= link_to "Profile", settings_profile_path %> <%= link_to "Password", settings_password_path %> <%= link_to "Account", settings_user_path %> </nav> <div> <%= yield %> </div> </section> <% end %> <%= render template: "layouts/application" %> 

 $ bin/rails g migration AddUnconfirmedEmailToUsers unconfirmed_email:string 

 $ bin/rails db:migrate 

 namespace :settings do resource :email, only: [ :show, :update ] resource :password, only: [ :show, :update ] resource :profile, only: [ :show, :update ] resource :user, only: [ :show, :destroy ] root to: redirect("/settings/profile") end 

 class Settings::EmailsController < Settings::BaseController def show end end 

 <h1>Change Email</h1> <%= form_with model: Current.user, url: settings_email_path do |form| %> <% if form.object.errors.any? %> <div>Error: <%= form.object.errors.full_messages.first %></div> <% end %> <div> <%= form.label :unconfirmed_email, "New email address" %> <%= form.email_field :unconfirmed_email, required: true %> </div> <div> <%= form.label :password_challenge %> <%= form.password_field :password_challenge, required: true, autocomplete: "current-password" %> </div> <div> <%= form.submit "Update email address" %> </div> <% end %> 

 class Settings::EmailsController < Settings::BaseController def show end def update if Current.user.update(email_params) UserMailer.with(user: Current.user).email_confirmation.deliver_later redirect_to settings_email_path, status: :see_other, notice: "We've sent a verification email to #{Current.user.unconfirmed_email}." else render :show, status: :unprocessable_entity end end private def email_params params.expect(user: [ :password_challenge, :unconfirmed_email ]).with_defaults(password_challenge: "") end end 

 $ bin/rails generate mailer User email_confirmation  create app/mailers/user_mailer.rb invoke erb create app/views/user_mailer create app/views/user_mailer/email_confirmation.text.erb create app/views/user_mailer/email_confirmation.html.erb invoke test_unit create test/mailers/user_mailer_test.rb create test/mailers/previews/user_mailer_preview.rb  

 class User < ApplicationRecord has_secure_password has_many :sessions, dependent: :destroy normalizes :email_address, with: ->(e) { e.strip.downcase } validates :first_name, :last_name, presence: true generates_token_for :email_confirmation, expires_in: 7.days do unconfirmed_email end def confirm_email update(email_address: unconfirmed_email, unconfirmed_email: nil) end def full_name "#{first_name} #{last_name}" end end 

 class UserMailer < ApplicationMailer # メールの件名は、I18n用のconfig/locales/en.ymlファイルで以下のように設定可能 # # en.user_mailer.email_confirmation.subject def email_confirmation @token = params[:user].generate_token_for(:email_confirmation) mail to: params[:user].unconfirmed_email end end 

 <h1>Verify your email address</h1> <p><%= link_to "Confirm your email", email_confirmation_url(token: @token) %></p> 

 Confirm your email: <%= email_confirmation_url(token: @token) %> 

 namespace :email do resources :confirmations, param: :token, only: [ :show ] end 

 class Email::ConfirmationsController < ApplicationController allow_unauthenticated_access def show user = User.find_by_token_for(:email_confirmation, params[:token]) if user&.confirm_email flash[:notice] = "Your email has been confirmed." else flash[:alert] = "Invalid token." end redirect_to root_path end end 

 <%= content_for :content do %> <section class="settings"> <nav> <h4>Account Settings</h4> <%= link_to "Profile", settings_profile_path %> <%= link_to "Email", settings_email_path %> <%= link_to "Password", settings_password_path %> <%= link_to "Account", settings_user_path %> </nav> <div> <%= yield %> </div> </section> <% end %> <%= render template: "layouts/application" %> 

 $ bin/rails g migration AddAdminToUsers admin:boolean 

 $ bin/rails db:migrate 

 class User < ApplicationRecord has_secure_password has_many :sessions, dependent: :destroy attr_readonly :admin # ... 

 $ bin/rails dbconsole SQLite version 3.43.2 2023-10-10 13:08:14 Enter ".help" for usage hints. sqlite>  

 UPDATE users SET admin=true WHERE users.id=1; 

 .quit 

 # Admins Only namespace :store do resources :users end 

 module Authorization extend ActiveSupport::Concern class_methods do def admin_access_only(**options) before_action -> { redirect_to root_path, alert: "You aren't allowed to do that." unless authenticated? && Current.user.admin? }, **options end end end 

 class ApplicationController < ActionController::Base include Authentication include Authorization # ... 

 class Store::BaseController < ApplicationController admin_access_only layout "settings" end 

 class Store::UsersController < Store::BaseController before_action :set_user, only: %i[ show edit update destroy ] def index @users = User.all end def show end def edit end def update if @user.update(user_params) redirect_to store_user_path(@user), status: :see_other, notice: "User has been updated" else render :edit, status: :unprocessable_entity end end def destroy end private def set_user @user = User.find(params[:id]) end def user_params params.expect(user: [ :first_name, :last_name, :email_address ]) end end 

 <h1><%= pluralize @users.count, "user" %></h1> <% @users.each do |user| %> <div> <%= link_to user.full_name, store_user_path(user) %> </div> <% end %> 

 <h1>Edit User</h1> <%= render "form", user: @user %> 

 <%= form_with model: [ :store, user ] do |form| %> <div> <%= form.label :first_name %> <%= form.text_field :first_name, required: true, autofocus: true, autocomplete: "given-name" %> </div> <div> <%= form.label :last_name %> <%= form.text_field :last_name, required: true, autocomplete: "family-name" %> </div> <div> <%= form.label :email_address %> <%= form.email_field :email_address, required: true, autocomplete: "email" %> </div> <div> <%= form.submit %> </div> <% end %> 

 <%= link_to "Back to all users", store_users_path %> <h1><%= @user.full_name %></h1> <p><%= @user.email_address %></p> <div> <%= link_to "Edit user", edit_store_user_path(@user) %> <%= button_to "Delete user", store_user_path(@user), method: :delete, data: { turbo_confirm: "Are you sure?" } %> </div> 

 <%= content_for :content do %> <section class="settings"> <nav> <h4>Account Settings</h4> <%= link_to "Profile", settings_profile_path %> <%= link_to "Email", settings_email_path %> <%= link_to "Password", settings_password_path %> <%= link_to "Account", settings_user_path %> <% if Current.user.admin? %> <h4>Store Settings</h4> <%= link_to "Users", store_users_path %> <% end %> </nav> <div> <%= yield %> </div> </section> <% end %> <%= render template: "layouts/application" %> 

 class ProductsController < ApplicationController allow_unauthenticated_access def index @products = Product.all end def show @product = Product.find(params[:id]) end end 

 $ cp -R app/views/products app/views/store 

 -<%= link_to "New product", new_product_path if authenticated? %> 

 - <% if authenticated? %> - <%= link_to "Edit", edit_product_path(@product) %> - <%= button_to "Delete", @product, method: :delete, data: { turbo_confirm: "Are you sure?" } %> - <% end %> 

 namespace :store do resources :products resources :users root to: redirect("/store/products") end 

 <%= content_for :content do %> <section class="settings"> <nav> <h4>Account Settings</h4> <%= link_to "Profile", settings_profile_path %> <%= link_to "Email", settings_email_path %> <%= link_to "Password", settings_password_path %> <%= link_to "Account", settings_user_path %> <% if Current.user.admin? %> <h4>Store Settings</h4> <%= link_to "Products", store_products_path %> <%= link_to "Users", store_users_path %> <% end %> </nav> <div> <%= yield %> </div> </section> <% end %> <%= render template: "layouts/application" %> 

 class Store::ProductsController < Store::BaseController before_action :set_product, only: %i[ show edit update destroy ] def index @products = Product.all end def show end def new @product = Product.new end def create @product = Product.new(product_params) if @product.save redirect_to store_product_path(@product) else render :new, status: :unprocessable_entity end end def edit end def update if @product.update(product_params) redirect_to store_product_path(@product) else render :edit, status: :unprocessable_entity end end def destroy @product.destroy redirect_to store_products_path end private def set_product @product = Product.find(params[:id]) end def product_params params.expect(product: [ :name, :description, :featured_image, :inventory_count ]) end end 

 <%= form_with model: [ :store, product ] do |form| %> <%# ... %> 

 <h1><%= t ".title" %></h1> <%= link_to "New product", new_store_product_path %> <div id="products"> <% @products.each do |product| %> <div> <%= link_to product.name, store_product_path(product) %> </div> <% end %> </div> 

 en: hello: "Hello world" products: index: title: "Products" store: products: index: title: "Products" activerecord: attributes: user: password_challenge: "Current password" 

 <h1>New product</h1> <%= render "form", product: @product %> <%= link_to "Cancel", store_products_path %> 

 <h1>Edit product</h1> <%= render "form", product: @product %> <%= link_to "Cancel", store_product_path(@product) %> 

 <p><%= link_to "Back", store_products_path %></p> <section class="product"> <%= image_tag @product.featured_image if @product.featured_image.attached? %> <section class="product-info"> <% cache @product do %> <h1><%= @product.name %></h1> <%= @product.description %> <% end %> <%= link_to "View in Storefront", @product %> <%= link_to "Edit", edit_store_product_path(@product) %> <%= button_to "Delete", [ :store, @product ], method: :delete, data: { turbo_confirm: "Are you sure?" } %> </section> </section> 

 $ rm app/views/store/products/_inventory.html.erb 

 module SessionTestHelper def sign_in_as(user) Current.session = user.sessions.create! ActionDispatch::TestRequest.create.cookie_jar.tap do |cookie_jar| cookie_jar.signed[:session_id] = Current.session.id cookies["session_id"] = cookie_jar[:session_id] end end def sign_out Current.session&.destroy! cookies.delete("session_id") end end ActiveSupport.on_load(:action_dispatch_integration_test) do include SessionTestHelper end 

 ENV["RAILS_ENV"] ||= "test" require_relative "../config/environment" require "rails/test_help" require_relative "test_helpers/session_test_helper" module ActiveSupport class TestCase include SessionTestHelper # ワーカー数を指定してテストを並列実行する parallelize(workers: :number_of_processors) # test/fixtures/*.yml内のすべてのフィクスチャをアルファベット順でセットアップする fixtures :all # 全テスト共通で使われるヘルパーメソッドをここに追加する end end 

 require "test_helper" class SignUpsControllerTest < ActionDispatch::IntegrationTest test "view sign up" do get sign_up_path assert_response :success end end 

 $ bin/rails test test/controllers/sign_ups_controller_test.rb:4 Running 1 tests in a single process (parallelization threshold is 50) Run options: --seed 5967 # Running:  .  Finished in 0.559107s, 1.7886 runs/s, 1.7886 assertions/s. 1 runs, 1 assertions, 0 failures, 0 errors, 0 skips  

 test "view sign up when authenticated" do sign_in_as users(:one) get sign_up_path assert_redirected_to root_path end 

 test "successful sign up" do assert_difference "User.count" do post sign_up_path, params: { user: { first_name: "Example", last_name: "User", email_address: "example@user.org", password: "password", password_confirmation: "password" } } assert_redirected_to root_path end end 

 test "invalid sign up" do assert_no_difference "User.count" do post sign_up_path, params: { user: { email_address: "example@user.org", password: "password", password_confirmation: "password" } } assert_response :unprocessable_entity end end 

 test "sign up ignores admin attribute" do assert_difference "User.count" do post sign_up_path, params: { user: { first_name: "Example", last_name: "User", email_address: "example@user.org", password: "password", password_confirmation: "password", admin: true } } assert_redirected_to root_path end refute User.find_by(email_address: "example@user.org").admin? end 

 require "test_helper" class Settings::EmailsControllerTest < ActionDispatch::IntegrationTest test "validates current password" do user = users(:one) sign_in_as user patch settings_email_path, params: { user: { password_challenge: "invalid", unconfirmed_email: "new@example.org" } } assert_response :unprocessable_entity assert_nil user.reload.unconfirmed_email assert_no_emails end end 

 test "sends email confirmation on successful update" do user = users(:one) sign_in_as user patch settings_email_path, params: { user: { password_challenge: "password", unconfirmed_email: "new@example.org" } } assert_response :redirect assert_equal "new@example.org", user.reload.unconfirmed_email assert_enqueued_email_with UserMailer, :email_confirmation, params: { user: user } end 

 <% password_digest = BCrypt::Password.create("password") %> one: Copilot menu email_address: one@example.com password_digest: <%= password_digest %> first_name: User last_name: One two: email_address: two@example.com password_digest: <%= password_digest %> first_name: User last_name: Two 

 $ bin/rails test test/controllers/settings/emails_controller_test.rb Running 2 tests in a single process (parallelization threshold is 50) Run options: --seed 31545 # Running:  ..  Finished in 0.954590s, 2.0951 runs/s, 6.2854 assertions/s. 2 runs, 6 assertions, 0 failures, 0 errors, 0 skips  

 require "test_helper" class Email::ConfirmationsControllerTest < ActionDispatch::IntegrationTest test "invalid tokens are ignored" do user = users(:one) previous_email = user.email_address user.update(unconfirmed_email: "new@example.org") get email_confirmation_path(token: "invalid") assert_equal "Invalid token.", flash[:alert] user.reload assert_equal previous_email, user.email_address end test "email is updated with a valid token" do user = users(:one) user.update(unconfirmed_email: "new@example.org") get email_confirmation_path(token: user.generate_token_for(:email_confirmation)) assert_equal "Your email has been confirmed.", flash[:notice] user.reload assert_equal "new@example.org", user.email_address assert_nil user.unconfirmed_email end end 

 require "test_helper" class UserMailerTest < ActionMailer::TestCase test "email_confirmation" do user = users(:one) user.update(unconfirmed_email: "new@example.org") mail = UserMailer.with(user: user).email_confirmation assert_equal "Email confirmation", mail.subject assert_equal [ "new@example.org" ], mail.to assert_match "/email/confirmations/", mail.body.encoded end end 

 <% password_digest = BCrypt::Password.create("password") %> one: email_address: one@example.com password_digest: <%= password_digest %> first_name: User last_name: One two: email_address: two@example.com password_digest: <%= password_digest %> first_name: User last_name: Two admin: email_address: admin@example.com password_digest: <%= password_digest %> first_name: Admin last_name: User admin: true 

 require "test_helper" class SettingsTest < ActionDispatch::IntegrationTest test "user settings nav" do sign_in_as users(:one) get settings_profile_path assert_dom "h4", "Account Settings" assert_not_dom "a", "Store Settings" end test "admin settings nav" do sign_in_as users(:admin) get settings_profile_path assert_dom "h4", "Account Settings" assert_dom "h4", "Store Settings" end end 

 $ bin/rails test test/integration/settings_test.rb 

 test "regular user cannot access /store/products" do sign_in_as users(:one) get store_products_path assert_response :redirect assert_equal "You aren't allowed to do that.", flash[:alert] end test "regular user cannot access /store/users" do sign_in_as users(:one) get store_users_path assert_response :redirect assert_equal "You aren't allowed to do that.", flash[:alert] end 

 test "admins can access /store/products" do sign_in_as users(:admin) get store_products_path assert_response :success end test "admins can access /store/users" do sign_in_as users(:admin) get store_users_path assert_response :success end 

 $ bin/rails test test/integration/settings_test.rb Running 6 tests in a single process (parallelization threshold is 50) Run options: --seed 33354 # Running:  ......  Finished in 0.625542s, 9.5917 runs/s, 12.7889 assertions/s. 6 runs, 8 assertions, 0 failures, 0 errors, 0 skips  

 $ bin/rails test Running 18 tests in a single process (parallelization threshold is 50) Run options: --seed 38561 # Running:  ..................  Finished in 0.915621s, 19.6588 runs/s, 51.3313 assertions/s. 18 runs, 47 assertions, 0 failures, 0 errors, 0 skips  

 $ bin/kamal deploy 

 $ bin/kamal dbc UPDATE users SET admin=true WHERE users.email='you@example.org'; .quit  

 $ bin/kamal console irb> User.find_by(email: "you@example.org").update(admin: true)