Tiddle

screenshot of Tiddle

Devise strategy for token authentication in API-only Ruby on Rails applications

Overview

Tiddle offers a streamlined solution for implementing token authentication in API-only Ruby on Rails applications. Designed specifically for developers using Devise, it allows for the management of multiple tokens per user, enhancing flexibility and security. Its lightweight nature means that it doesn't come with extensive configurations, making it a solid choice for developers looking to implement authentication quickly while maintaining control over the details of their implementation.

The installation process is straightforward, requiring only a simple addition to the Gemfile and a few configurations in your application. Tiddle is compatible with various models and offers essential features that ensure secure and effective token management.

Features

  • Multiple Tokens per User: Supports the use of multiple tokens for each user, allowing for better session management and enhanced security.

  • Lightweight Design: Tiddle is non-configurable and focuses on delivering core token authentication functionality without unnecessary bulk.

  • Customizable Token Generation: Customize how tokens are generated and stored by creating your own model to manage authentication tokens.

  • Manual Implementation Flexibility: Leaves certain implementation aspects up to developers, providing the freedom to tailor the authentication process according to specific project needs.

  • Secure Token Removal: Offers functionality to remove all existing tokens upon a password change or in case of a security breach, enhancing user security.

  • Optional Token Expiration: Includes a feature to set token expiration after a period of inactivity, enhancing security further and allowing for automated token management.

  • Headers for Authentication: Requires inclusion of X-USER-EMAIL and X-USER-TOKEN headers in each request that requires authentication, ensuring secure communication.