Olivier Buffon olivierbuffon

JWT Auth + Refresh Tokens in Rails

This is just some code I recently used in my development application in order to add token-based authentication for my api-only rails app. The api-client was to be consumed by a mobile application, so I needed an authentication solution that would keep the user logged in indefinetly and the only way to do this was either using refresh tokens or sliding sessions.

I also needed a way to both blacklist and whitelist tokens based on a unique identifier (jti)

Before trying it out DIY, I considered using:

	# official docs: https://graphql-ruby.org/dataloader/sources.html

	# app/graphql/sources/association.rb
	class Sources::Association < ::GraphQL::Dataloader::Source
	def initialize(association_name, scope = nil)
	@association_name = association_name
	@scope = scope
	end

	def fetch(records)