Remove unused migrations

Gemfile

@@ -81,8 +81,8 @@ end
 
 gem 'ruby-openai', '~> 7.0'
 
-gem "devise", "~> 4.9"
-gem "devise-jwt", "~> 0.12.0"
+gem 'devise', '~> 4.9'
+gem 'devise-jwt', '~> 0.12.0'
 
 gem 'solid_queue', '~> 0.3.3'
 

Gemfile.lock

@@ -166,9 +166,9 @@ GEM
     jbuilder (2.12.0)
       actionview (>= 5.0.0)
       activesupport (>= 5.0.0)
+    json (2.7.2)
     jwt (2.8.2)
       base64
-    json (2.7.2)
     language_server-protocol (3.17.0.3)
     loofah (2.22.0)
       crass (~> 1.0.2)

app/controllers/application_controller.rb

@@ -1,8 +1,8 @@
 # frozen_string_literal: true
 
 class ApplicationController < ActionController::Base
-  protect_from_forgery with: :exception, if: Proc.new { |c| c.request.format != 'application/json' }
-  protect_from_forgery with: :null_session, if: Proc.new { |c| c.request.format == 'application/json' }
+  protect_from_forgery with: :exception, if: proc { |c| c.request.format != 'application/json' }
+  protect_from_forgery with: :null_session, if: proc { |c| c.request.format == 'application/json' }
 
   before_action :authenticate_user!
 

config/initializers/devise.rb

@@ -97,7 +97,7 @@
   # Notice that if you are skipping storage for all authentication paths, you
   # may want to disable generating routes to Devise's sessions controller by
   # passing skip: :sessions to `devise_for` in your config/routes.rb
-  config.skip_session_storage = [:http_auth, :params_auth]
+  config.skip_session_storage = %i[http_auth params_auth]
 
   # By default, Devise cleans up the CSRF token on authentication to
   # avoid CSRF token fixation attacks. This means that, when using AJAX
@@ -313,6 +313,23 @@
 
   # devise-jwt config
   config.jwt do |jwt|
-    jwt.secret = Rails.application.credentials.devise_jwt_secret_key!
+    credentials = Rails.application.credentials
+
+    unless credentials.devise_jwt_secret_key.present?
+      encrypted = ActiveSupport::EncryptedConfiguration.new(
+        config_path: 'config/credentials.yml.enc',
+        key_path: 'config/master.key',
+        env_key: 'RAILS_MASTER_KEY',
+        raise_if_missing_key: true
+      )
+
+      current_credentials = YAML.load(encrypted.read) || {}
+      devise_jwt_secret_key = SecureRandom.hex(12)
+      updated_credentials = current_credentials.deep_merge({devise_jwt_secret_key:  devise_jwt_secret_key})
+      encrypted.write(updated_credentials.to_yaml)
+      jwt.secret = devise_jwt_secret_key
+    else
+      jwt.secret = credentials.devise_jwt_secret_key!
+    end
   end
 end