Feature: Access tokens for API access (#604)

Co-authored-by: Pranav Raj Sreepuram <pranavrajs@gmail.com>
2020-03-11 00:02:15 +05:30
parent 19ab0fe108
commit a5b1e2b650
29 changed files with 517 additions and 270 deletions
--- a/app/controllers/api/base_controller.rb
+++ b/app/controllers/api/base_controller.rb
@@ -1,9 +1,16 @@
 class Api::BaseController < ApplicationController
+  include AccessTokenAuthHelper
  respond_to :json
-  before_action :authenticate_user!
+  before_action :authenticate_access_token!, if: :authenticate_by_access_token?
+  before_action :validate_bot_access_token!, if: :authenticate_by_access_token?
+  before_action :authenticate_user!, unless: :authenticate_by_access_token?

  private

+  def authenticate_by_access_token?
+    request.headers[:api_access_token].present?
+  end
+
  def set_conversation
    @conversation ||= current_account.conversations.find_by(display_id: params[:conversation_id])
  end