{"repo":"waiting-for-dev/devise-jwt","free":true,"listed":false,"github":"https://github.com/waiting-for-dev/devise-jwt","clone":"git clone https://github.com/waiting-for-dev/devise-jwt.git","description":"JWT token authentication with devise and rails","language":"Ruby","stars":1293,"topics":["devise","jwt","rails","ruby-gem","authentication"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"Devise::JWT devise-jwt is a Devise extension which uses JWT tokens for user authentication. It follows secure by default principle. This gem is just a replacement for cookies when these can't be used. As with cookies, a devise-jwt token will mandatorily have an expiration time. If you need that your users never sign out, you will be better off with a solution using refresh tokens, like some implementation of OAuth2. You can read about which security concerns this library takes into account and about JWT generic secure usage in the following series of posts: - Stand Up for JWT Revocation - JWT Revocation Strategies - JWT Secure Usage - A secure JWT authentication implementation for Rack and Rails devise-jwt is just a thin layer on top of warden-jwt auth that configures it to be used out of the box with Devise and Rails. Upgrade notes v0.7.0 Since version v0.7.0 Blacklist revocation strategy has been renamed to Denylist while Whitelist has been renamed to Allowlist . For Denylist , you only need to update the include line you're using in your revocation strategy model: For Allowlist , you need to update the include line you're using in your user model: You also have to rename your WhitelistedJwt model to AllowlistedJwt , rename model/whitelisted jwt.rb to model/allowlisted jwt.rb and change the underlying database table to allowlisted jwts (or configure the model to keep using the old name). Installation Add this line to your application's Gemfile: And then execute: $ bundle Or","default_branch":null,"files":null,"tree":[],"storefront":"/r/waiting-for-dev","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/waiting-for-dev/devise-jwt/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}