Welcome to Authentication Hell
summary
Browser game DragonRuby runs inside an iframe compiled to WebAssembly and triggers real Rails authentication flows (passwords, ROTP one‑time codes, WebAuthn/passkeys via the webauthn gem). Collision detection in a 60fps tick starts async network requests, Rails stores a session record and streams a toast via Turbo, the game polls the status to freeze/unfreeze the player. Demo mostly works; a DragonRuby runtime bug is fixed via Discord, and the game is available at authenticationhell.com.
AI-written summary · about
chapters (9)
- 0:00Authentication Hell intro
- 2:54Childhood games to auth hell
- 5:45Gameplay and theme
- 8:11DragonRuby engine
- 13:30DragonRuby in Rails
- 15:15Building with AI
- 18:01Game auth flow
- 22:51Handling one-time passwords and passkeys
- 24:58Takeaways
related talks
33mMake a Massively Multiplayer Ruby Game with Dragon Ruby
24mUnraveling the black box: past, present and future of authentication in Rails
59mGoing Auth The Rails On A Crazy Train
31mRails Application Security in Practice
27mGo Auth Urself
32mSecuring Your Rails App
34mThe World of Rails Security
57mSecurity and Identity: Ruby, CAS, and OpenID