pelle/oauth-plugin — pull request #137 by thetizzo (2013-02-19 22:46:10+00:00)
Title: allow? should return false if no token is found

In application_controller_methods.rb:

Authenticator#allow? should return false if the token method returns nil.

Currently it returns true but doesn't set current_user because of the if statement which will allow you to have access to the endpoint even if there isn't a token in the request header.