Bearer Authentication in Rails Controller

application_controller.rb

# application_controller.rb

class ApplicationController < ActionController::API

  include ActionController::HttpAuthentication::Token::ControllerMethods
  before_action :authenticate

  protected

  def authenticate
    authenticate_token || render_unauthorized
  end

  def authenticate_token
    authenticate_with_http_token do |token, _options|
      Credential.authenticated(token)
    end
  end

  def render_unauthorized(realm = 'Application')
    headers['WWW-Authenticate'] = %(Token realm="#{realm.delete('"')}")
    render json: { error: :bad_credentials }.to_json, status: :unauthorized
  end

end