I have an internal Rails app that also acts as a web service to allow interaction with our other in-house apps. Originally, the entire app was authenticated using the http_basic_authenticate_with method. My application_controller.rb looked like this: class ApplicationController < ActionController::Base http_basic_authentication_with :name => CONFIG['name'], :password => CONFIG['password'] protect_from_forgery end This worked, since it’s an internal ...