Custom Token Authentication SessionsController

create.json.jbuilder

json.success true
json.data do
  json.auth_token @user.authentication_token
end

sessions_controller.rb

class SessionsController < Devise::SessionsController
  skip_before_filter :verify_authenticity_token, if: :json_request?

  def create
    warden.authenticate!(:scope => resource_name, :recall => "sessions#failure")
    @user = current_user
    # renders create.json.jbuilder
  end

  def destroy
    # TODO
  end

  def failure
  end

  protected

  def json_request?
    request.format.json?
  end
end