Rails 7.1 has tried to address one of the seemingly unapparent security vulnerability called timing based enumeration attack by introducing a method authenticate_by when using has_secure_password. This blog demonstrates the same. https://blog.kiprosh.com/rails-7-1-adds-authenticated_by/