Forum: Ruby on Rails Help with a new api authentication gem

Announcement (2017-05-07): is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see and for other Rails- und Ruby-related community platforms.
78fb6294b093652cdb0d3c61e32bc723?d=identicon&s=25 Jose Castellanos (nextgenappsllc)
on 2016-11-29 21:23
I needed to make a secure way to authenticate API requests for native
apps without timing out or sending a new CSRF token every time a new
view is loaded with a form. I created the following method to
authenticate and started documenting it.

The link is

It uses devise for user authentication with a token posted in the header
and for CSRF in non get requests it uses a date/salt/token hash.

I would like people to contribute and help improve and make this a
better gem! More info is in the link.
This topic is locked and can not be replied to.