Example of how to use sorcery to authenticate outside the controller scope

free_auth.rb

module Sorcery
  class FreeAuth
    include Controller

    def initialize(request)
      @request = request
    end

    def session
      @session ||= @request.session
    end

    def cookies
      @cookies ||= ActionDispatch::Cookies::CookieJar.build(@request)
    end
  end

  def self.with_request(request)
    yield(FreeAuth.new(request)) if block_given?
  end
end

route_constraint.rb

  class CanCanConstraint
    def initialize(action, context)
      @action, @context = action, context
    end

    def matches?(request)
      Sorcery.with_request(request) do |c|
        c.current_user && Ability.new(c.current_user).can?(@action, @context)
      end
    end
  end