waiting-for-dev/devise-jwt

Health v2 · maintenance only

Adoption not part of the score

1292 stars · 130 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Ruby gem that extends Devise to authenticate Rails users with JWT tokens instead of cookies, built as a thin layer over warden-jwt_auth. It follows a secure-by-default principle with mandatory token expiration and pluggable revocation strategies.

Use cases

• add JWT authentication to a Rails app using Devise
• authenticate a Rails API with stateless tokens
• replace cookie-based sessions with JWT tokens
• implement token revocation with denylist or allowlist strategies
• secure a mobile or SPA client talking to a Rails backend

When to choose

• you already use Devise and need token-based auth for an API or SPA
• you want a secure-by-default JWT setup with revocation strategies
• you need a drop-in replacement for cookie sessions in Rails

When to avoid

• you need users to never sign out or want refresh-token flows like OAuth2
• your Rails app can rely on standard cookie-based sessions
• you are not using Devise or Rails/Rack

Facets

library · maturity active

auth middleware security web-development backend security apis ruby jwt devise rails token-authentication ruby-gem warden web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="waiting-for-dev/devise-jwt")