home/libr-2
2
0
Fork 0
mirror of https://github.com/wahyd4/libr-2.git synced 2026-08-09 05:15:53 +10:00
Code Issues Packages Projects Releases Wiki Activity

#10 Add god token to filter some request

Browse Source
This commit is contained in:
junv
2015-11-10 22:56:28 +08:00
parent febea3313e
commit 4490a6dc49
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/v1/sessions_controller.rb
+9 -5
View File
@@ -2,7 +2,7 @@ class Api::V1::SessionsController < Devise::SessionsController
skip_before_action :verify_authenticity_token
after_action :clear_session
before_action :callback, only: [:map_callback_info]
before_action :check_god_token, only: [:callback]
def create
warden.authenticate!(:scope => resource_name, :recall => "#{controller_path}#failure")
@@ -29,13 +29,16 @@ class Api::V1::SessionsController < Devise::SessionsController
private
def app_auth uid, provider, access_token
def app_auth uid, provider, access_token
identity = Identity.find_or_create_by(uid: uid, provider: provider)
user = identity.user
if user
user
else
User.create_user_from_oauth(uid, provider, nil, nil, nil)
user = User.create_user_from_oauth(uid, provider, nil, nil, nil)
identity.user = user
identity.save!
user
end
end
@@ -43,8 +46,9 @@ class Api::V1::SessionsController < Devise::SessionsController
session.clear
end
def map_callback_info
def check_god_token
god_token = request.headers["Authorization"].try(:split, ' ').try(:last)
return render json: {message: 'You are fake!'}, status: 401 if god_token != 'love_libr'
end
end