Question

I’m passing in

{"email":"[e-mail]"}

as the parameters.

I’m getting a 200 response with a nil body. Why do I not see a 401?

When I run the first

User.where('email = ?', params[:email]).first

query in the console, I get nil. I’ve also tried with passwords, testing invalid passwords. In the console, it fails. But I keep getting a 200 response here:

  def sign_in    
    user = User.where('email = ?', params[:email]).first
    if !user
      render :json => user, status => 401
      return
    end

    if user.valid_password?(params[:password])
      render :json => user
      return
    end

    render :json => user, status => 401
  end

Answer 1

You should use head instead to return just the 401 code without page content :

  def sign_in    
    user = User.where('email = ?', params[:email]).first
    if user && user.valid_password?(params[:password])
      render :json => user
    else 
      head :unauthorized  # 401
    end
  end