lib/simple_token_authentication/unsafe/acts_as_token_authentication_handler.rb
# For this example, we are simply using token authentication
# via parameters. However, anyone could use Rails's token
# authentication features to get the token from a header.
For this example, we are simply using token authentication
via parameters. However, anyone could use Rails's token
authentication features to get the token from a header.
For this example we are simply using token authentication via parameters . However anyone could use Rails ' s token authentication features to get the token from a header .
def authenticate_entity_from_token!
      params_token_name = :auth_token
      if (token = params[params_token_name]).blank? && request.headers[header_token_name]
        params[params_token_name] = token
      end
      entity = nil
      entity   = token && entity_class.where(authentication_token: token.to_s).first
      if entity && Devise.secure_compare(entity.authentication_token, params[params_token_name])
        sign_in entity, store: false
      end
    end
def authenticate_entity_from_token! params_token_name = :auth_token if ( token = params [ params_token_name ] ) . blank? && request . headers [ header_token_name ] params [ params_token_name ] = token end entity = nil entity = token && entity_class . where ( authentication_token : token . to_s ) . first if entity && Devise . secure_compare ( entity . authentication_token , params [ params_token_name ] ) sign_in entity , store : false end end
For this example, we are simply using token authentication
via parameters.
For this example we are simply using token authentication via parameters .
# Set the authentication token params if not already present, # see http://stackoverflow.com/questions/11017348/rails-api-authentication-by-headers-token # See https://github.com/ryanb/cancan/blob/1.6.10/lib/cancan/controller_resource.rb#L108-L111 # Notice we are passing store false, so the entity is not # actually stored in the session and a token is needed # for every request. If you want the token to work as a # sign in token, you can simply remove store: false.