Authentication at the route level

[ShootingStarr]

Hey guys, in Device we have this method:

# config/routes.rb
authenticate :user do
  mount Sidekiq::Web => '/sidekiq'
end

https://github.com/mperham/sidekiq/wiki/Monitoring#authentication

Do we have similar method in Sorcery?

[Ch4s3]

create lib/auth_constraint.rb

class AdminConstraint
  def matches?(request)
    return false unless request.session[:user_id]
    user = User.find request.session[:user_id]
    user && user.root?
  end
end

Then in your routes:

  mount Sidekiq::Web => "/sidekiq", constraints: AdminConstraint.new

or something like this. Check the wiki https://github.com/NoamB/sorcery/wiki/Routes-Constraints

[ShootingStarr]

@Ch4s3 thx

[hendricius]

Is there a way to do this without a constraint? Or is this best practice? :)