do not use devise strategy for api auth

This commit is contained in:
Pete Matsyburka
2023-12-26 01:19:28 +02:00
parent 64c8707957
commit 94a13ffca2
3 changed files with 12 additions and 24 deletions
-19
View File
@@ -1,19 +0,0 @@
# frozen_string_literal: true
class AuthWithTokenStrategy < Devise::Strategies::Base
def valid?
request.headers['X-Auth-Token'].present?
end
def authenticate!
sha256 = Digest::SHA256.hexdigest(request.headers['X-Auth-Token'])
user = User.joins(:access_token).find_by(access_token: { sha256: })
if user
success!(user)
else
fail!('Invalid token')
end
end
end