2 files changed, 12 insertions, 0 deletions

@@ -1,6 +1,16 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery with: :exception
 
+  protected
+
+    def authenticate_pokeviewer(login, token)
+      user = login && User.find_by_login(login)
+
+      ActiveSupport::SecurityUtils.secure_compare(
+        ::Digest::SHA256.hexdigest(user.pokeviewer_token),
+        ::Digest::SHA256.hexdigest(token))
+    end
+
   private
 
     def after_sign_out_path_for(resource)
@@ -3,4 +3,6 @@ class User < ApplicationRecord
   # :confirmable, :lockable, :timeoutable and :omniauthable
   devise :database_authenticatable,
          :recoverable, :rememberable, :trackable, :validatable
+
+  has_secure_token :pokeviewer_token
 end