如何通过设计验证令牌

Question

I want to use devise' token_authenticatable helper to authenticate users against the system.

I found some older documentations where a method named valid_authentication_token?(...) is used but couldn't find the same in newer devise version.

So what's the right way to authenticate a user? Should I request the Model for user with named token and checking if email-adresses match?

Thanks a lot for your help.

PascalTurbo

Answer 1

If you add

t.token_authenticatable

to you user ActionRecord, and add

devise  :token_authenticatable

to your User model

and specify which param is your token key in config/initializer/devise, something like this:

config.token_authentication_key = :auth_token

then controllers that use

before_filter :authenticate_user!  # Tell devise to use :user map 

to authenticate. after the authenticate_user!, individual methods can test using

user_signed_in?

will authorize users either by the login session or the devise authorization token that is passed on the query string or passed using HTTP basic authentication. See Devise helper code for details.