mvxcvi / browserid-rails Goto Github PK

This is more of q question than an issue. Please let me know if I should log it somewhere else.

I have implemented Persona authentication in my front-end (AngularJS) app. I need to restrict access to some data on the Rails server, to the logged in user. Can I use this gem to do that? If so, how?

I can see that I could use verify_token to ensure that the user is genuine, but presumably I don't need to do that for every request.

I am trying to avoid using a heavyweight authentication gem like Devise for this purpose.

Thanks,

Keith

What I don't know is what exactly they mean by that. I do know that on Mozilla's own websites, Firefox Accounts is to replace Persona entirely. What I want to know concerns Persona as a work of open source software offered to the public as an authentication solution for their own projects, such as in the present repository. If this is incorporated into a website, will (authentication features of) such a website simply stop working in November or whenever is the appointed date for pulling the plug on Persona? It would be a crying shame, I think, but Mozilla like any other organization has finite resources and must allocate them to maximum effect in service to their mission. I hope at least that Persona is something that can be spooled off to interested parties outside Mozilla as seems to have happened with Firefox OS. It seems to me that one of the more screaming needs of the present state of online activity is something convenient along the lines of "log in with Facebook" or "log in with Google" but minus the copious spyware.

tl/dr Should I build something using Persona or shouldn't I?