This may be a bit too open ended but what is the best way to add user
authentication and security services to a ruby on rails app. Is there
a standard API or Framework to achieve this?
There are a few ways, one is well covered in the AWDWR book.
The other is similar but cleaner for you. A plugin called:
acts_as_authenticated
Essentially things are separated into different controllers.
Controllers that require authentication or login of some kind are not
accessible without that. That means the URL/URI's generated by their
methods/actions cannot be accessed without authentication.
Everything in the controllers that don't require authentication are
accessible. (basically, though this is all a very simplified
description, but Rails does make it all pretty easy)
But check out the Ruby Talk list at Google groups.
That's the best place to ask Rails-specific questions.
This list may get you some answers, as Rails does use Ruby and
libraries written in Ruby. Depends on the topic