gistfile1.rb

class Api::V1::BaseController < ActionController::Base
  include ActionController::HttpAuthentication::Basic

  protect_from_forgery with: :null_session

  before_filter :require_current_user

  respond_to :json

  rescue_from AccessDenied do |exception|
    respond_with({ status: 'error', message: exception.message }, status: :forbidden)
  end

  protected
  def require_current_user
    raise AccessDenied unless current_user
  end

  def current_user
    @current_user ||= begin
                        user, token = user_name_and_password(request)
                        User.where(github_username: user, api_token: token).first
                      end
  end
end