hummingbird-me/hummingbird — pull request #322 by NuckChorris (2014-12-13 08:06:53+00:00)
Title: [WIP] JWT Tokens

I've barely started but I wanna get feedback on this early. It's huge, it's ugly, and it overrides a lot of Devise. It got really big really fast so I'll probably move it to a module mixed into the ApplicationController.

Oh and, in case it's not clear, a lot of the code is just to make sure the old auth_token works too, and can be removed after migration.

All that being said, it works, and potentially solves Nuck's Ol' Bitchfest #247, including the Discourse integration (without network stuff!) and also enables us to grant OAuth tokens which can access the Internal APIs (because Tenpenchii especially relies on those)

TODO:
* [ ] Tests
* [ ] Revocation
* [ ] POSTing tokens instead of using cookies