[Question] Cookieless Tiddle & ActionCable about tiddle HOT 2 CLOSED

module ApplicationCable
  class Connection < ActionCable::Connection::Base
    identified_by :current_user

    def connect
      self.current_user = find_verified_user
    end

    protected

    def find_verified_user
      user = User.find_for_authentication(email: request.params[:user_email])
      reject_unauthorized_connection unless user

      token = Tiddle::TokenIssuer.build.find_token(user, request.params[:user_token])
      if token && unexpired?(token)
        return user
      end

      reject_unauthorized_connection
    end

    def unexpired?(token)
      return true unless token.respond_to?(:expires_in)
      return true if token.expires_in.blank? || token.expires_in.zero?

      Time.current <= token.last_used_at + token.expires_in
    end
  end
end