autenticar la subida de archivos

activestorage permite subida de archivos sin autenticación!

app/controllers/concerns/active_storage/authenticated_direct_uploads_controller.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module ActiveStorage
+  module AuthenticatedDirectUploadsController
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :authenticate_usuarie!
+    end
+  end
+end

config/application.rb

@@ -39,6 +39,8 @@ module Sutty
     config.active_storage.variant_processor = :vips
 
     config.after_initialize do
+      ActiveStorage::DirectUploadsController.include ActiveStorage::AuthenticatedDirectUploadsController
+
       I18n.available_locales.each do |locale|
         translations = I18n.t(:email_address, locale: locale)