lib/authlogic/session/params.rb in authlogic-1.2.0 vs lib/authlogic/session/params.rb in authlogic-1.2.1
- old
+ new
@@ -5,11 +5,11 @@
# Tries to log the user in via params. Think about cookies and sessions. They are just hashes in your controller, so are params. People never
# look at params as an authentication option, but it can be useful for logging into private feeds, etc. Logging in a user is as simple as:
#
# https://www.domain.com?user_credentials=[insert single access token here]
#
- # Wait, what is a single access token? It is all explained in the README. Checkout the "Single Access" section in the README. For security reasons, this type of authentication
- # is ONLY available via single access tokens, you can NOT pass your remember token.
+ # Wait, what is a single access token? It is all explained in the README. Checkout the "Tokens" section in the README, there is section about
+ # single access tokens. For security reasons, this type of authentication is ONLY available via single access tokens, you can NOT pass your persistence token.
module Params
# Tries to validate the session from information in the params token
def valid_params?
if params_credentials && single_access_token_field && single_access_allowed_request_types.include?(controller.request_content_type)
self.unauthorized_record = search_for_record("find_by_#{single_access_token_field}", params_credentials)
\ No newline at end of file