How to make multiple sessions for one user in Devise(:database_authenticatable)?

Question

API

Hello!
I am developing an apishka for a rail application (backend for a mobile client), in which authorization has long been performed by Devise. Everything is clear with the web version, it has been working like clockwork for a long time - a user can have several active sessions on different computers. But with mobile authorization, everything seems to be bad, at least for me. There is a basic User model:

devise :database_authenticatable,
         :registerable,
         :recoverable, 
         :rememberable, 
         :trackable, 
         :validatable, 
         :token_authenticatable,
         :omniauthable

In user_api_controller, respectively, there are authorization lines:

before_filter :authenticate_user!, except: [ :new, :sign_in ]

def sign_in

    if params[:user][:email].blank? and params[:user][:name].blank?
      return render status: 404, json: { error: "You must specify email or name"}
    end
    if params[:user][:email]
      user = User.find_by_email(email: params[:user][:email].downcase)
    elsif params[:user][:name]
      user = User.where("lower(name) = ?", params[:user][:name].downcase).first
    end

    if user.blank?
      return render status: 404, json: { error: "User not found" }
    end

    if user.valid_password? params[:user][:password]
      user.reset_authentication_token!
      return render status: 200, json: { token: user.authentication_token }
    else
      return render status: 401, json: { error: "Invalid password" }
    end

  end

Everything is fine, but the user can only have one session, I log in from one client (from the 5th iPhone of course) - I log in all the oki under the same name from another - on the first one, respectively, the token becomes invalid and everything is bad. Well, it's understandable, the database structure takes into account that the user only has an id token = (Can this situation be fixed with the help of rail magic? Or is it better to write a separate module independent of devise'a? to put in for storing tokens for api?
Maybe you know some good ready-made gems for api authorization?
thank you in advance!

Answer 1

You don't need any magic, just implement your strategy for devise.
Here is an example with redis .