RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Beskar 0.2: Rails security with coordinated rate limits and session revocation

by Maciej Litwiniuk —

I’ve released Beskar 0.2.0, an MIT-licensed security engine for Rails 8+. It combines authentication rate limits, scanner detection, configurable account locks, persistent IP bans, and a mountable security dashboard. This release moves enforcement state into the shared database, coordinates limits across application workers without requiring Redis, and adds durable session revocation.

Other highlights:

  • Devise integration and documented hooks for Rails’ built-in authentication.
  • Separate dashboard permissions and administrative history recording who changed a ban and why.
  • Audited CSV/JSON exports.
  • Monitor mode for observing traffic before enabling automatic blocking.

Existing users should read the upgrade notes: 0.2 introduces migrations, authentication integration changes, and a one-time sign-out of existing Devise sessions.

Source and documentation · Changelog · Official homepage: https://auditbadger.com/beskar/

Feedback from developers using Rails’ built-in authentication would be especially welcome.

Post a comment

You can use basic HTML markup (e.g. <a>) or Markdown.

As you are not logged in, you will be
directed via GitHub to signup or sign in