{"action":"created","issue":{"url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/381","labels_url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/381/labels{/name}","comments_url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/381/comments","events_url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/381/events","html_url":"https://github.com/FreeUKGen/MyopicVicar/issues/381","id":55150963,"number":381,"title":"API login/logout via Devise for WinREG","user":{"login":"benwbrum","id":199961,"avatar_url":"https://avatars.githubusercontent.com/u/199961?v=3","gravatar_id":"","url":"https://api.github.com/users/benwbrum","html_url":"https://github.com/benwbrum","followers_url":"https://api.github.com/users/benwbrum/followers","following_url":"https://api.github.com/users/benwbrum/following{/other_user}","gists_url":"https://api.github.com/users/benwbrum/gists{/gist_id}","starred_url":"https://api.github.com/users/benwbrum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benwbrum/subscriptions","organizations_url":"https://api.github.com/users/benwbrum/orgs","repos_url":"https://api.github.com/users/benwbrum/repos","events_url":"https://api.github.com/users/benwbrum/events{/privacy}","received_events_url":"https://api.github.com/users/benwbrum/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-22T13:05:54Z","updated_at":"2015-01-22T13:20:28Z","closed_at":null,"body":"Mike is blocked by needing a way to establish a Rails session, but none of us knowing off-hand how his WinREG tool can log in to the F2 site.  Surely there are other client programs that do authentication via Devise; we just need to research them and communicate an approach to Mike"},"comment":{"url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/comments/71018842","html_url":"https://github.com/FreeUKGen/MyopicVicar/issues/381#issuecomment-71018842","issue_url":"https://api.github.com/repos/FreeUKGen/MyopicVicar/issues/381","id":71018842,"user":{"login":"juliancheal","id":63991,"avatar_url":"https://avatars.githubusercontent.com/u/63991?v=3","gravatar_id":"","url":"https://api.github.com/users/juliancheal","html_url":"https://github.com/juliancheal","followers_url":"https://api.github.com/users/juliancheal/followers","following_url":"https://api.github.com/users/juliancheal/following{/other_user}","gists_url":"https://api.github.com/users/juliancheal/gists{/gist_id}","starred_url":"https://api.github.com/users/juliancheal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/juliancheal/subscriptions","organizations_url":"https://api.github.com/users/juliancheal/orgs","repos_url":"https://api.github.com/users/juliancheal/repos","events_url":"https://api.github.com/users/juliancheal/events{/privacy}","received_events_url":"https://api.github.com/users/juliancheal/received_events","type":"User","site_admin":false},"created_at":"2015-01-22T13:20:28Z","updated_at":"2015-01-22T13:20:28Z","body":"We have two options, I believe: OAuth2, or roll our own with Devise\r\n\r\nIf we want to go down the OAuth2 route, there are plenty of examples of doing OAuth2 and this I would think would be the most secure.\r\n\r\nThe alternative would have been to have used to be Devise's token_authenticatable (http://blog.codebykat.com/2012/07/23/remote-api-authentication-with-rails-3-using-activeresource-and-devise/), but that's been deprecated due to security reasons. There are examples of securing an API in this Railscast http://railscasts.com/episodes/352-securing-an-api"}}