ToolJet/app/controllers/application_controller.rb

class ApplicationController < ActionController::API
    include Pundit
    before_action :authenticate_request
    attr_reader :current_user

    private
        def authenticate_request
            @current_user = AuthorizeApiRequest.call(request.headers).result
            render json: { error: 'Not Authorized' }, status: 401 unless @current_user
        end
end