View difference between Paste ID: p6mvC8T3 and dJgqkeqp

 Devise - Invalidate user session if the same user logs in from a different browser/machine
-class AddSignInTokenToUsers < ActiveRecord::Migration
+#cmd: rails g migration add_sign_in_token_to_users
-  def change
+#db/migration/######_add_sign_in_token_to_users.rb
-    add_column :users, :current_sign_in_token, :string
+class AddSignInTokenToUsers < ActiveRecord::Migration
-  end
+  def change
     add_column :users, :current_sign_in_token, :string
-
+  end
-class ApplicationController < ActionController::Base
+
-  before_filter :invalidate_simultaneous_user_session, :unless => Proc.new {|c| c.controller_name == 'sessions' and c.action_name = 'create' }
+
-
+#app/application_controller.rb
-  def invalidate_simultaneous_user_session
+class ApplicationController < ActionController::Base
-    sign_out_and_redirect(current_user) if current_user && session[:sign_in_token] != current_user.current_sign_in_token
+  before_action :invalidate_simultaneous_user_session, :unless => Proc.new {|c| c.controller_name == 'sessions' and c.action_name = 'create' }
-  end
+
-
+  def invalidate_simultaneous_user_session
-  def sign_in(resource_or_scope, *args)
+    sign_out_and_redirect(current_user) if current_user && session[:sign_in_token] != current_user.current_sign_in_token
-    super
+  end
-    token = Devise.friendly_token
+
-    current_user.update_attribute :current_sign_in_token, token
+
-    session[:sign_in_token] = token
+
-  end
+#config/application.rb
 module Yourapp
   class Application < Rails::Application
 
 
   #add this
     Warden::Manager.after_authentication do |user, auth, opts|
       #auth.cookies - to access cookie
       token = Devise.friendly_token
       user.update_attribute :current_sign_in_token, token
       #session
       auth.env['rack.session'][:sign_in_token] = token
     end
 
     Warden::Manager.before_logout do |user, auth, opts|
       auth.env['rack.session'].delete :sign_in_token
     end
   end
 
 end