I lifted most of this code from Auth0's Rails tutorial here. This can be merged in as is, given it isn't being used yet to lock down any of our endpoints. The Secured#authorize method can be included in any given controller as a before_action (with specific controller methods listed out as needed) to restrict access. Let me know if there's any feedback/requests.
I lifted most of this code from Auth0's Rails tutorial here. This can be merged in as is, given it isn't being used yet to lock down any of our endpoints. The Secured#authorize method can be included in any given controller as a
before_action(with specific controller methods listed out as needed) to restrict access. Let me know if there's any feedback/requests.