title: How does our iphone app use the public API?
body: <p>I've been struggling with this for a while and hope someone can help. We have a Rails API, it's currently private on AWS. There is an Angular App frontend and Iphone App which consume the api. That's fine.</p>
  
  <p>We now want to open up the API to the public using token based authentication (not oauth as it will be for the single user and not need other account data). So a user generates a token within their profile area and makes requests using that token in a header. How does the Iphone App and Angular App bypass this? as the controllers will need the token to authenticate? but the iphone and web app won't know what the users generated token is. Also the token may only be available for some users.</p>
  
  <p>Or is it a case of logging a user in through a form and bypassing the authentication through these devices. Sorry i just cannot get my head around this. Thanks</p>