From bb8057994632c93db74ab5ba006e5b81f56479b3 Mon Sep 17 00:00:00 2001 From: Davide Abrigo Date: Wed, 3 Apr 2024 15:12:15 +0200 Subject: [PATCH] Use authentication keys for resource lookup --- app/services/devise/api/resource_owner_service/authenticate.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/services/devise/api/resource_owner_service/authenticate.rb b/app/services/devise/api/resource_owner_service/authenticate.rb index 9d7d776..414efb4 100644 --- a/app/services/devise/api/resource_owner_service/authenticate.rb +++ b/app/services/devise/api/resource_owner_service/authenticate.rb @@ -8,7 +8,7 @@ class Authenticate < Devise::Api::BaseService option :resource_class, type: Types::Class def call - resource = resource_class.find_for_authentication(email: params[:email]) + resource = resource_class.find_for_authentication(params.slice(*resource_class.authentication_keys)) return Failure(error: :invalid_email, record: nil) if resource.blank? return Failure(error: :invalid_authentication, record: resource) unless authenticate!(resource)