The way I have frequently seen this done is by tucking a before_action away in a parent controller. Don’t do that.

The advice here that I think you should internalize is: controller flow should be explicit. You need to be able to read it and understand the request-response cycle without hopping across multiple files.