class Devise::Strategies::Authenticatable

def valid_params_request?

By default, a request is valid if the controller set the proper env variable.
def valid_params_request?
  !!env["devise.allow_params_authentication"]
end