MaryKuz

class Api::ProductsController < ApplicationController
  skip_before_action :authenticate

  ....
end
  
  
class Api::UsersController < ApplicationController
  skip_before_action :authenticate

MaryKuz

class Api::SessionsController < ApplicationController
  skip_before_action :authenticate, only: [:create]

  ....
end

MaryKuz

class ApplicationController < ActionController::Base
....

  before_action :authenticate

  attr_reader :current_user

  private
  def authenticate
    authenticate_or_request_with_http_token do |token, options|

MaryKuz

class Api::SessionsController < ApplicationController
  private
  def build_resource
    @session = Session.new resource_params
  end

  def resource
    @session ||= Session.new user: current_user
  end

MaryKuz

rescue_from ActiveRecord::RecordInvalid, ActiveModel::StrictValidationFailed do
    render :errors, status: :unprocessable_entity
  end

MaryKuz

require 'rails_helper'

RSpec.describe Session, type: :lib do
  it { should be_a ActiveModel::Validations }

  let(:session) { Session.new email: 'test@test.com', password: '12345678' }

  let(:user) { stub_model User }

  subject { session }

MaryKuz

validate do |model|
  if user
    model.errors.add :password, 'is invalid' unless user.authenticate password
  else
    model.errors.add :email, 'not found'
  end
end

MaryKuz

class Session
  include ActiveModel::Validations

  attr_reader :email, :password, :user

  def initialize params
    params = params.try(:symbolize_keys) || {}

    @user = params[:user]

MaryKuz

module Shop
  class Application < Rails::Application
    ...

    config.eager_load_paths << config.root.join('lib').to_s
  end
end

MaryKuz

Rails.application.routes.draw do
  namespace :api do
    ...

    resource :session, only: [:create, :destroy]
  end
end