Why shouldn't rails noobs use Gem Devise?

devise, ruby, ruby-on-rails, rubygems

Solution

I completely disagree with the advice you've been given so far, including from the other answers here.

Rolling your own authentication, especially as a beginner, is a good way to put your users at risk. Security (and especially crypto) is hard and you'll probably get it wrong somehow even if you have experience.

If you want to learn how password-based authentication works (and you should), learn it on your free time. Don't make your users unwitting test subjects and put their privacy at risk.

Problem

I am a ruby on rails noob. In contrast I am fairly good in my HTML CSS javascript and jQuery. Recently I got into ruby on rails using this tutorial by Michael Hartl: http://ruby.railstutorial.org/ruby-on-rails-tutorial-book . But alas I am trying to build my own project and use gem devise as a simple way to do authentication. As it is difficult for a beginner to do authentication. However, everyone is mentioning that noobs should not use this gem. Why shouldn't a noob use devise for his own project? Thanks for any tips at all but I would much prefer a verbose answer.

Original source