HTTP basic authentication over Devise

Question

I am trying to use HTTP Basic Authentication over Devise for my Rails app. I have done following settings -> config.http_authenticatable = true in the devise initializer And :database_authenticatable strategy in my USER model.

When I try to access a web service mysite.com/user/[email protected]&password=test123

The username password is not recognized. A credentials box pops up where on entering the credentials I am authenticated to use the data.

How can I provide the credentials in the URL and avoid the pop up prompt?

Information in a URL is passed through a GET Method and information like logging in is passed through a POST method - for security, I don't believe you should be able to do what you want to do actually — MageeWorld

Leonel Galán Leonel Galán · Accepted Answer · 2016-06-30T16:07:06

1

votes

HTTP Basic Auth, is passed through HTTP Headers, not GET or POST params.

HTTP basic authentication over Devise

2 Answers