Token authentication - Githubissues

statiklabs commented 13 years ago

Hi Noam. Great work on the Sorcery gem. Is token authentication something that would find it's way into Sorcery on day?

NoamB commented 13 years ago

Yes, it's been asked for a few times. Since v0.7.0 is nearly done, it is set for v0.8.0. The issue will stay here until it's done. Thanks.

statiklabs commented 13 years ago

Great to hear. I will keep plugging away with Sorcery then. Look forward to the 0.8.0.0 release!

Thanks for your hard work, making mine easier!

theodorton commented 12 years ago

Token authentication would be great for use with mobile app backends and Web Services :)

I'll try and look into this over the weekend. Maybe I can submit a pull request!

Anyway, +1 from me.

henningms commented 12 years ago

+1

Would love to see this feature, would really make mobile-development easier :)

NoamB commented 12 years ago

Hi, I'm not getting to it...

I was thinking about an API like this:

require_login :token_allowed => true, :only => [:json]

This way it extends require_login to allow or disallow tokens, and only for specific formats.

I would probably do it in a new submodule.

If anyone wants to 'lift the glove', it shouldn't be much trouble implementing.

On Fri, Mar 30, 2012 at 3:19 PM, Henning M. Stephansen < reply@reply.github.com

wrote:

+1

Would love to see this feature, would really make mobile-development easier :)

Reply to this email directly or view it on GitHub: https://github.com/NoamB/sorcery/issues/70#issuecomment-4841349

NoamB commented 12 years ago

Actually require_login has all the options of a before filter, so I shouldn't touch 'only'.

Maybe another before filter, allows_token_authentication.

Not sure. How is it done in other gems?

philostler commented 12 years ago

Atm I'm building my app in the hope token authentication comes along before I start building my API.

Seeing this feature in there would be a massive +100 from me

ADO commented 12 years ago

+1

Authlogic was a good one for this back in the day although it's methodology may be outdated now, I'm not sure: see Single Access Token module and Session Params module

NoamB commented 12 years ago

I'm thinking this design:

on password creation/update create another field - auth_token
a new before_filter - 'allow_token_authentication' needs to be placed in the controller (along with options like format and allowed actions). This sets some var for this controller, and when 'auto_login' is called under the hood, it will try to login from the auth_token as well.

Also the whole thing might be a new submodule and not in the default.

philostler commented 12 years ago

That design sounds ideal, only side note I'd say is allowing the auth_token to generated on request by the application as well and not just when the password gets touched.

grigio commented 12 years ago

+1 What do you think about integrate something like this http://railscasts.com/episodes/352-securing-an-api?view=asciicast

lephyrius commented 12 years ago

+1

trnc-ck commented 11 years ago

+1

lephyrius commented 11 years ago

Now that sorcery 0.8.0 has been released how do I use this feature? A tiny example would be nice. :)

atrauzzi commented 11 years ago

I'm curious as to the status of this. Think it's okay to manually implement my own token authentication using authenticate_or_request_with_http_token in my rails-api app in the meantime?

davidchua commented 11 years ago

I am working on an api using sorcery and this is certainly something I'd love to have.

fzagarzazu commented 11 years ago

Hello everybody, hi Noam.

I just sent a pull request that adds supports for access tokens in RESTful JSON APIs and extends the external submodule to support OAuth 2.0 For Login (client side flow).

https://github.com/NoamB/sorcery/pull/415

I needed this for a pet project that I have been working on my free time, an angularjs app with rails-api as the backend server.

I would really appreciate if you guys could test it, code reviews would be great too.

Support for mongoid and mongomapper is included, but I don't use mongodb so if you plan to use it please do review the code to make sure everything works correctly.

Instructions are in the README.

Let me know what you guys think.

Regards,

kristianmandrup commented 11 years ago

@ fzagarzazu Awesome! +1

Would be nice with a small demo app on github demonstrating this feature :) Cheers!

fzagarzazu commented 11 years ago

I have just published a quick demo with rails-api and OAuth 2.0 for login.

https://github.com/fzagarzazu/sorcery_access_token_demo

Hope it helps, regards,

@kristianmandrup

mrcwinn commented 11 years ago

+1

PapePathe commented 10 years ago

+1

ammancilla commented 10 years ago

Any update about it?. +1

kirs commented 10 years ago

I have plans on this feature, but it will probably be in 1.x release.

ammancilla commented 10 years ago

Glad to know that! Thanks for your work.

nathanpsouza commented 10 years ago

This was implemented?

holden commented 9 years ago

What's the status of this awesome feature?

FUT commented 9 years ago

Three years have passed :) I am sure it will be easier to implement app-specific solution

volisoft commented 9 years ago

Is token authentication planned for 1.x release?

Mehonoshin commented 9 years ago

Seems that we should use some custom implementation of tokens :)

arjayx commented 8 years ago

hi excelent work. Thanks

I was wondering, if was implemented this feature ?