simple_token_authentication
Simple Token Authentication is a Ruby gem that adds token-based authentication to Rails applications built with Devise. It packages a safe token authentication pattern originally described by Devise creator José Valim, providing functionality that was removed from Devise for security reasons. The gem allows you to generate, revoke, and securely compare authentication tokens associated with model instances, typically a User model. It supports both ActiveRecord and Mongoid, and works with Rails, Rails API, and ActionController::Metal controllers. Usage requires two main steps: making one or more models token authenticatable so they expose authentication tokens on their instances, and enabling controllers to handle token authentication requests by validating tokens from incoming requests. The gem is designed for basic token authentication scenarios and is well suited for use cases like single-use sign-in links sent by email. It does not mitigate replay attacks, so if tokens are not discarded after a single use,