Rolling your own auth is a waste of time unless this is some learning exercise. Cognito + oauth2-proxy or the millions of alternatives are at your disposal. A

Rolling your own auth is a waste of time unless this is some learning exercise. Cognito + oauth2-proxy or the millions of alternatives are at your disposal. Although for past 15 years I've socially distanced myself from Rails, I'm pretty sure it had a decent auth library at the time, something called device.