allowing authenticating using headers as well as a post request

[ingolfured]

For some system, all post request data is logged in the system. When there is no possible way to change that, it's much nicer to be able to send the user email and password via the header instead of a data string in a post request. Therefore, instead of sending

curl -s -X POST -d '[email protected]&password=partypassword' -D -  'https://theurl.com/api/v1/auth/sign_in' -o /dev/null 2>&1

we can do

curl -s -X POST -H 'email: [email protected]' -H 'password: partypassword' -D -  'https://theurl.com/api/v1/auth/sign_in' -o /dev/null 2>&1

[ingolfured]

You guys have any thoughts?

[lynndylanhurley]

Hi @ingolfured - this looks fine to me.

[lynndylanhurley]

But if we're going to support this, should it work the same way for each action (registration, password reset, etc.)?

[ingolfured]

Pretty sure this handles the other controllers as well (all calling params_for_resource.) Are you talking about writing more tests to cover that? Or am I misunderstanding something?