gistfile1.rb

  # Authenticates a user by their email and cleartext password.  Returns a User or nil.
  def self.authenticate(email, password)
    if user = self.activated.first(:email => email)
      if validate_password(password, user.password_hash, user.password_salt)
        return user
      end
    end
    false
  end
  
  # returns true if the password is correct
  def self.validate_password(password, password_hash, password_salt)
    password_hash == OpenSSL::Digest::SHA1.hexdigest("--#{password_salt}--#{password}--")    
  end