evodata/app/controllers/api/v1/base_controller.rb

class Api::V1::BaseController < ApplicationController
  include ApiKeyAuthentication

  # Require API key authentication
  prepend_before_action :authenticate_with_api_key!

  # before_action :authenticate

  protect_from_forgery with: :null_session

  def ping
    render json: {message: "pong"}, status: :ok
  end

  private

  def authenticate
    authenticate_user_with_token || handle_bad_authentication
  end

  def authenticate_user_with_token
    authenticate_with_http_token do |token, options|
      @user ||= User.find_by(private_api_key: token)
    end
  end

  def handle_bad_authentication
    render json: {message: "Bad credentials"}, status: :unauthorized
  end
end