tsurupin/portfolio

class Cms::ApplicationController < ApplicationController
  before_action :authenticate_author_from_token!, except: :layout

  layout 'cms/layouts/application'

  def authenticate_author_from_token!
    auth_token = request.headers['Authorization']
    return authentication_error unless auth_token
    authenticate_with_auth_token(auth_token)
  end

  private

  def authenticate_with_auth_token(auth_token)
    return authentication_error unless auth_token.include?(':')

    author_id = auth_token.split(':').first
    author = Author.find(author_id)

    if author && Devise.secure_compare(author.access_token, auth_token)
      sign_in(author, store: false)
    else
      authentication_error
    end
  end

  def authentication_error
    render json: { errorMessage: 'unauthorized' }, status: :unauthorized
  end
end