如果用户已经通过身份验证，如何允许设计登录？

Question

There's an App which creates a new user when you first time open the site (if you don't have a cookie). Also you can sign in as different user. The problem is Devise doesn't allow to sign in as already authenticated user. Even if I override require_no_authentication in SessionsController warden still remembers the user through session.

I do aware about guest user pattern but there's no guest user. The app is intended to create real user accounts and allow to sign in as another users.

So the question is should I create new Warden strategy and if so, what checks shall I do there? Or there's another way?

Answer 1

Just reset the session in the desired action. You can just make the first line be reset_session , or make it a before filter, like so:

before_filter :deauthorize_user, only: [ :some_action ]

def deauthorize_user
  reset_session
end