amnesia7's Profile

amnesia7 on #352 Securing an API 2012-06-10 14:29:02

...but would I use the access_token field to identify the user calling the API?

amnesia7 on #352 Securing an API 2012-06-03 07:22:07

Very useful screencast Ryan.

I'm using a generate_access_token in my User model to create an access_token for each user so that my app can do "Remember Me" using a cookie (so they don't need to login again) as per screencast #274.

Would I use this same access_token field for the user to be able to call my API?
Can you see any issue in doing that?
Or should they be different?

amnesia7 on #274 Remember Me & Reset Password 2012-01-21 02:23:02

Another great screencast.

I've implemented this auth_token into an app that uses simple omniauth (#241) for authentication. Is this auth_token the same token I could use for a user to call my app's API or do I need to generate a different token for that purpose?

Comments by