class ApplicationController < ActionController::API include Renderable before_action :authenticate! rescue_from Unauthorized do render_error("Unauthorized", :unauthorized) end private def authenticate! token = request.headers["Authorization"]&.split(" ")&.last @current_user = Session.find_by(token:)&.user raise Unauthorized unless @current_user end def current_user @current_user end end