Resque, Devise and admin authentication

30
votes

Using Resque and Devise, i have roles for User, like:

User.first.role #=> admin
User.last.role #=> regular

I want to setup an authentication for Resque. So, inside config/routes.rb i have:

namespace :admin do
  mount Resque::Server.new, :at => "/resque", :as => :resque
end

And, of course it's accessible for all logged in users.

Is there any way to use a role from User.role? It should be accessible only by users with 'admin' role.

Thanks a lot.

4
ruby-on-railsdeviseresque

4 Answers

39
votes

Use a route constraint, in your routes.rb file:

  resque_constraint = lambda do |request|
    request.env['warden'].authenticate? and request.env['warden'].user.admin?
  end

  constraints resque_constraint do
    mount Resque::Server, :at => "/admin/resque"
  end
20
votes

in your routes.rb file:

authenticate :user, lambda {|u| u.role == 'admin' } do
    mount Resque::Server.new, :at => "/resque"
end

Also, make sure you have devise_for :users somewhere in that file

14
votes

You can try subclassing the Resque::Server class this way:

require 'resque/server'

class SecureResqueServer < Resque::Server

  before do
    redirect '/login' unless some_condition_is_met! 
  end

end

And using it in your routes this way:

mount SecureResqueServer.new, :at => '/resque'

I got this information from this blog. Give it a try.

9
votes

There is always the new solution, type this in your routes.rb for rails > 3.1:

  authenticate :admin do
    mount Resque::Server.new, :at => "/resque"
  end

And don't forget:

devise_for :admins