Salman Ali

[sulranjan]

Select Topic Area

Question

Body

Sure, here's a complete implementation of a Rails endpoint for authenticating with email and password.

class SessionsController < ApplicationController
  def create
    user = User.find_by(email: params[:email])
    
    if user && user.authenticate(params[:password])
      render json: { token: generate_token(user.id) }, status: :ok
    else
      render json: { error: 'Invalid email or password' }, status: :unauthorized
    end
  end

  private

  def generate_token(user_id)
    payload = { user_id: user_id, exp: 24.hours.from_now.to_i }
    JWT.encode(payload, Rails.application.secrets.secret_key_base)
  end
end

Rails.application.routes.draw do
  post 'login', to: 'sessions#create'
end

class User < ApplicationRecord
  has_secure_password
end

class CreateUsers < ActiveRecord::Migration[6.1]
  def change
    create_table :users do |t|
      t.string :email, null: false, index: { unique: true }
      t.string :password_digest, null: false

      t.timestamps
    end
  end
end

Make sure you have the bcrypt gem in your Gemfile to use has_secure_password.

gem 'bcrypt', '~> 3.1.7'

Then run bundle install to install the gem and rails db:migrate to create the users table in your database.

This implementation includes:

• A SessionsController with a create action for handling login requests.
• A route to map POST /login to the SessionsController#create action.
• A User model with has_secure_password for handling password authentication.
• A migration to create the users table with email and password_digest columns.