HTTP Auth for Rails

application_controller.rb

class ApplicationController < ActionController::Base

    include HttpAuthConcern
    
    # the rest of your code

end

http_auth_concern.rb

module HttpAuthConcern
    extend ActiveSupport::Concern

    included do
        before_action :http_authenticate
    end

    def http_authenticate
        return true unless Rails.env == 'production'

        authenticate_or_request_with_http_basic do |username, password|
            username == 'username' && password == 'password'
        end
    end
end