lib/authlogic/session/params.rb in authlogic-1.2.0 vs lib/authlogic/session/params.rb in authlogic-1.2.1

- old
+ new

@@ -5,11 +5,11 @@ # Tries to log the user in via params. Think about cookies and sessions. They are just hashes in your controller, so are params. People never # look at params as an authentication option, but it can be useful for logging into private feeds, etc. Logging in a user is as simple as: # # https://www.domain.com?user_credentials=[insert single access token here] # - # Wait, what is a single access token? It is all explained in the README. Checkout the "Single Access" section in the README. For security reasons, this type of authentication - # is ONLY available via single access tokens, you can NOT pass your remember token. + # Wait, what is a single access token? It is all explained in the README. Checkout the "Tokens" section in the README, there is section about + # single access tokens. For security reasons, this type of authentication is ONLY available via single access tokens, you can NOT pass your persistence token. module Params # Tries to validate the session from information in the params token def valid_params? if params_credentials && single_access_token_field && single_access_allowed_request_types.include?(controller.request_content_type) self.unauthorized_record = search_for_record("find_by_#{single_access_token_field}", params_credentials) \ No newline at end of file