1class Api::SessionsController < Api::Controller
 2  skip_before_action :authenticate!
 3
 4  def create
 5    user_session = User.login(params[:username], params[:password])
 6    token = tokenize(user_session.access(request))
 7    render json: {
 8      authentication_token: token,
 9      username: params[:username],
10      gravatar_id: user_session.user.gravatar_id
11    }
12  end
13
14  private
15
16  def tokenize(session_id)
17    JsonWebToken.encode(session_id: session_id)
18  end
19end