Javier Menéndez Rizo javier-menendez

JWT Auth + Refresh Tokens in Rails

This is just some code I recently used in my development application in order to add token-based authentication for my api-only rails app. The api-client was to be consumed by a mobile application, so I needed an authentication solution that would keep the user logged in indefinetly and the only way to do this was either using refresh tokens or sliding sessions.

I also needed a way to both blacklist and whitelist tokens based on a unique identifier (jti)

Before trying it out DIY, I considered using:

Notes

This guide uses Kamal 1.8.1

Motivation

Kamal was designed with 1 service = 1 droplet/VPS in mind.
But I'm cheap and I want to be able to deploy multiple demo/poc apps apps on my $20/month dedicated server.
What the hell, I'll even host my private container registry on it.

Ruby: The future of frozen string literals

What is a literal?

In programming languages, literals are textual representations of values in the source code. This is a syntactical concept.

Some examples:

7 # integer literal

Example of Kamal deployment from Github Actions.

Add your applications .env variables to the Github repo as a repository secret, you can find this under the repo settings => secrets and variables => actions

https://github.com/username/repo_name/settings/secrets/actions

you are going to need an ssh private key that your deployment server is aware of (add public key to servers .ssh/authorized_keys) and add the ssh private key as a repo secret

create action workflows

	# encoding: UTF-8
	class GxApp
	include Mongoid::Document
	include Mongoid::Timestamps
	include Mongoid::Sequence

	store_in session: "gxservice"

	field :name, type: String, default: "Guanxi.me"
	field :version, type: String

	require 'active_record/connection_adapters/sqlite3_adapter'

	#
	# Monkey-patch for disable foreign keys during `alter_table` for sqlite3 adapter for Rails 5
	#

	module ActiveRecord
	module ConnectionAdapters
	class SQLite3Adapter < AbstractAdapter