basic.rb

Warden::Strategies.add(:site_basic) do
  
  def valid?
    authorization.present?
  end
  
  def authenticate!
    if authorization.present?
      site = Site.find_by_identifier_and_token(*user_name_and_password)
      site ? success!(site) : fail!("Unauthorized")
    else
      pass
    end
  end
  
  
  protected
  
  
  def authorization
    request.env['HTTP_AUTHORIZATION']   ||
    request.env['X-HTTP_AUTHORIZATION'] ||
    request.env['X_HTTP_AUTHORIZATION'] ||
    request.env['REDIRECT_X_HTTP_AUTHORIZATION']
  end
  
  def user_name_and_password
    decode_credentials.split(/:/, 2)
  end
  
  def decode_credentials
    Base64.decode64(authorization.split(' ', 2).last || '')
  end
  
end