Libr/app/controllers/application_controller.rb

class ApplicationController < ActionController::Base
  protect_from_forgery

  before_filter :current_user!

  #before_filter :authenticate_user_from_token!


  def current_user!
    @current_user = nil
    @current_user = current_user if user_signed_in?
  end

  #def sign_in(name, avatar)
  #  if session[:name] == name
  #    return
  #  end
  #  unless User.find_by_name name
  #    User.create_user(name, avatar)
  #  end
  #  session[:name] = name
  #end

  def same_user(controller)
    user = User.find_by_id params[:id]
    if user== nil || user!= @current_user
      redirect_to :root, notice: 'You do not have the right to see others keys.'
    end
  end

  def authenticate_user_from_token!
    user_email = params[:user_email].presence
    user       = user_email && User.find_by_email(user_email)
    token = AuthKey.find_by_value params[:user_token]

    if user && user.auth_keys.include?(token)
      sign_in user, store: false
    else
      render :json => {:success => false, msg: "Authentication failed"}
    end
  end


end