Rails API的用户身份验证

Question

so a question which has been confusing me. I have created a simple API server using ruby on rails and able to read the data through my android program i created. SO I wanted to create a user register/login , however then it struck me i would probably need a token authentication so that not everyone can come and delete my entire database right ? However, now im confused , do i need to have 2 authentication before using the API then ? One for social media such as facebook, twitter , g+ , and one for the API itself ? I know it sounds silly, why would i need two authentication? But i thought i best ask look around first for my answer. Also since i heard facebook authentications token usually expire every 90 days.. does that mean i have to relogin the user every 90 days ? Would be good if someone can point me to the right direction

Answer 1

Have you hear about Firebase? They have quite a lot of examples on how to handle authentication with their services. They can handle your backend easily for you.

Best thing about Firebase is that it is free for low usage apps and the pricing is quite reasonable for a small team.

Here are some useful links.

https://firebase.google.com/docs/auth/

https://firebase.google.com/products/