dawarich/app/controllers/api_controller.rb
2024-08-25 20:19:02 +02:00

18 lines
370 B
Ruby

# frozen_string_literal: true
class ApiController < ApplicationController
skip_before_action :verify_authenticity_token
before_action :authenticate_api_key
private
def authenticate_api_key
return head :unauthorized unless current_api_user
true
end
def current_api_user
@current_api_user ||= User.find_by(api_key: params[:api_key])
end
end