class Api::BaseController < ApplicationController include AccessTokenAuthHelper respond_to :json before_action :authenticate_access_token!, if: :authenticate_by_access_token? before_action :validate_bot_access_token!, if: :authenticate_by_access_token? before_action :authenticate_user!, unless: :authenticate_by_access_token? private def authenticate_by_access_token? request.headers[:api_access_token].present? || request.headers[:HTTP_API_ACCESS_TOKEN].present? end def check_authorization(model = nil) model ||= controller_name.classify.constantize authorize(model) end end