Skip Authenticate method in Rails

Question

I have a Sessions controller that requires authentication for creating a session using .authenticate method of has_secure_password defined in the User model, as per below:

Edit:

class User < ApplicationRecord
 before_save { self.email = email.downcase }

# Relationships
 has_secure_password
 has_many :pedidos

 # Validations
 VALID_EMAIL_REGEX = /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i
 validates :nome, presence: true
 validates :empresa, presence: true
 validates :email, presence: true, length: { maximum: 255 },    
                format: { with: VALID_EMAIL_REGEX }
 validates :cpf, presence: true, length: { minimum: 11, maximum: 14 }
 validates :password, presence: true, length: { minimum: 6 }    

 def admin?
    self.admin
 end
end

SessionsController

def create
    user = User.find_by(email: params[:sessions][:email])
    if user && user.authenticate(params[:sessions][:password])
        flash[:success] = "Seja bem vindo(a), #{user.nome}!"            
        session[:user_id] = user.id
        redirect_to user
    else
        flash.now[:danger] = 'Não foi possível realizar o login, '
        flash.now[:danger] += 'combinação usuário/senha inválido'
        render 'new'
    end
end

Now I created an admin/Users controller that I would like to perform database operations without having to enter password and password_confirmation fields. In the current scenario I'm getting error messages saying "password and password_confirmation can't be blank"

How should I proceed? Thank you.

Answer 1

If presumably your problem is that you'd like to be able to save new Users to your db without needing a password, one way might be to just add a dummy password for admins as explained here

Another might be to skip validations when saving an admin to the db. (I haven't tried this with has_secure_password so I'm not positive that it'd work but worth a shot)