search

pelle / oauth-plugin

Rails plugin for OAuth
http://stakeventures.com/articles/2009/07/21/consuming-oauth-intelligently-in-rails
MIT License
717 stars 217 forks source link

allow? should return false if no token is found #137

Closed thetizzo closed 10 years ago

thetizzo commented 11 years ago

In application_controller_methods.rb:

Authenticator#allow? should return false if the token method returns nil.

Currently it returns true but doesn't set current_user because of the if statement which will allow you to have access to the endpoint even if there isn't a token in the request header.