Contents

class ApplicationController < ActionController::API
  include ActionController::HttpAuthentication::Token::ControllerMethods

  before_action :set_current_request_details
  before_action :authenticate
  <%- if options.lockable? %>
  def require_lock(wait: 1.hour, attempts: 10)
    counter = Kredis.counter("require_lock:#{request.remote_ip}:#{params[:controller]}:#{params[:action]}", expires_in: wait)
    counter.increment

    if counter.value > attempts
      render json: { error: "You've exceeded the maximum number of attempts" }, status: :too_many_requests
    end
  end
  <%- end -%>

  private
    def authenticate
      if session = authenticate_with_http_token { |token, _| Session.find_signed(token) }
        Current.session = session
      else
        request_http_token_authentication
      end
    end

    def set_current_request_details
      Current.user_agent = request.user_agent
      Current.ip_address = request.ip
    end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
authentication-zero-2.16.8	lib/generators/authentication/templates/controllers/api/application_controller.rb.tt
authentication-zero-2.16.7	lib/generators/authentication/templates/controllers/api/application_controller.rb.tt
authentication-zero-2.16.6	lib/generators/authentication/templates/controllers/api/application_controller.rb.tt