Authentication on middleware

ability.rb

class Ability
  include CanCan::Ability

  def initialize(user)
    if user.admin?
      can :manage, Resque
    end
  end
end

description.txt

https://github.com/plataformatec/devise/
https://github.com/hassox/warden/
https://github.com/ryanb/cancan
https://github.com/defunkt/resque/

routes.rb

Foo::Application.routes.draw do

  mount Resque::Server, :at => '/insecure'

  # Devise gives us "authenticate", which we can use to secure this.
  authenticate :user do
    mount Resque::Server, :at => "/have-to-be-logged-in"
  end

  # CanCan gives us "constraints"
  authenticate :user do
    constraints(CanAccessResque) do
      mount Resque::Server, :at => "/have-to-be-logged-in-and-authorized"
    end
  end
end