Encora Senior Ruby on Rails Developer Interview Questions, Process, and Tips

STI is used for inheritance while polymorphic association is used for multiple associations

• STI is used for modeling inheritance relationships where different classes share common attributes and behaviors

• Polymorphic association is used when a model can belong to more than one other model on a single association

• STI can lead to a large number of columns in a table, while polymorphic association requires an additional colu...read more

Rails API best practices

• Use versioning in API endpoints for future changes

• Implement proper error handling and response codes

• Follow RESTful principles for resource naming and routing

• Use serializers to format JSON responses efficiently

• Implement authentication and authorization for secure access

CSRF tokens and CSP headers are important security measures to protect against cross-site scripting attacks.

• CSRF tokens are used to prevent cross-site request forgery attacks by generating a unique token for each user session.

• CSP headers help prevent cross-site scripting attacks by specifying which resources can be loaded on a webpage.

• Both CSRF tokens and CSP headers are essential in securing web applications against m

Implementing an API rate limiter to control the number of requests a user can make within a certain time frame.

• Use a token bucket algorithm to track and limit the number of requests per user.

• Set a limit on the number of requests allowed per user within a specific time window.

• Implement a sliding window approach to track request timestamps and enforce rate limits.

• Consider using Redis or a similar caching mechanism to sto