如何使用 postman 请求受 devise 保护的 API？

Question

I have a rails app using devise, in the beggining it was just using rails. Now i am adding some react using the gem react-rails.. To make the story short i have an API controller like this

class Api::CustomersController < ApplicationController
skip_before_action :verify_authenticity_token
before_action :authenticate_user!

def index
    customers = Customer.all
    render json: customers, status: :ok
end ....

and i want to access that info or test my API using POSTMAN.. Of course when i try the app just redirect me to the login page because of the "before_action:authenticate_user.".: Now the question is? Can i access to that API URL using postman? how?

Thanks in advance

Answer 1

This isn't related to devise mainly.

You'll need to generate an auth_token for each user (and of course, create a db migration for it with uniqueness) and authenticate your user using Authorization header.

Otherwise, you can check the devise tokens solutions from here: https://github.com/plataformatec/devise/wiki/How-To:-Simple-Token-Authentication-Example

Answer 2

could you use any of these two gems are interesting to work with devise and a verification token

devise_token_auth documentation

devise-jwt documentation

Answer 3

Plain simple solution is to copy the browser session cookie (after logging in) into insomnia cookie. Look for cookie value in browser dev tools, it needs to be copied into insomnia cookie value for the same page.