Sha256: 5a620ba01a3ec438f6eab5a0d32bbca40eec8184a20392e9c92adda0e2817006
Contents?: true
Size: 809 Bytes
Versions: 126
Compression:
Stored size: 809 Bytes
Contents
# frozen_string_literal: true
#
# From https://gist.github.com/josevalim/fb706b1e933ef01e4fb6
#
require "devise"
module Renalware
module API
class TokenAuthenticatedApiController < ApplicationController
before_action :authenticate_user_from_token!
before_action :authenticate_user! # fallback
private
def authenticate_user_from_token!
username = params[:username].presence
user = username && User.find_by(username: username)
# Notice how we use Devise.secure_compare to compare the token
# in the database with the token given in the params, mitigating
# timing attacks.
if user && ::Devise.secure_compare(user.authentication_token, params[:token])
sign_in user, store: false
end
end
end
end
end
Version data entries
126 entries across 126 versions & 1 rubygems