Rails Authentication

routes.rb

Rails.application.routes.draw do
  scope module: "api" do
    constraints subdomain: "api" do
      match "/", to: "root#options", via: [:options]
      match "*unmatched", to: "root#options", via: [:options]

      resource :me, only: [:show, :update], controller: "me"

      post "/me/access_tokens", to: "access_tokens#create"
      delete "/me/access_tokens", to: "access_tokens#destroy"

      shallow do
        resources :projects, only: [:index, :show, :create, :update, :destroy] do
          resources :tasks, only: [:index, :show, :create, :update, :destroy]
        end
      end
      get "/", to: "root#index", as: :api_root

      match "*unmatched", to: "root#not_found", via: [:get]
    end
  end
end