Unauthorised issue in email-auth using JSON in Rails API

[kinsomicrote]

Hello,

I'm using the gem in my Rails 7.1 API app. I have the gem configured to use email-auth and JSON (since it's an API). I'm not making use of the JWT option.

I'm using Postman for my requests. This is what the flow looks like;

• I make a request to /email-auth-request
• An email is sent. Then I make a POST request to /email-auth using the key that was sent
• A response that I've been logged in is sent.
• I make a request to a route that requires authentication, then I get a 401 Unauthorised error.

I have the application set to make use of sessions;

config.session_store :cookie_store, key: '_interslice_session'
config.middleware.use ActionDispatch::Cookies
config.middleware.use config.session_store, config.session_options

I can also confirm that the session is sent back and forth.

I have this in my ApplicationController:

private
  def authenticate
    rodauth.require_account
  end

Then I have the callback in the controller that needs authentication: before_action :authenticate

I'm not sure why I get the error. What might I be missing or doing wrong?

Thanks

[kinsomicrote]

Figured it out, I needed to make use of:

rodauth(:admin).require_account

For my use case.