Module: Auth::Behavior::Core::ControllerExtensions::CurrentUser

Defined in:
lib/auth/behavior/core/controller_extensions/current_user.rb

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.included(base) ⇒ Object 



2
3
4
5
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 2

def self.included(base)
  base.send(:hide_action, :current_user_from_session, :timeout_current_session, :authenticate_with_persistence_token,
            :authenticate_with_single_access_token, :authenticate_with_session_cookie, :authenticate_current_user)
end

Instance Method Details

#authenticate_current_user ⇒ Object 



14
15
16
17
18
19
20
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 14

def authenticate_current_user
  if session && session[:session_token]
    authenticate_with_session_cookie
  elsif params && params[:single_access_token] # single access token, useful for WS APIs
    authenticate_with_single_access_token
  end
end

#authenticate_with_persistence_token ⇒ Object 



36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 36

def authenticate_with_persistence_token
  password =  Password.find_by_persistence_token(session[:session_token], :include => :authenticatable)
  if password
    @current_user = password.authenticatable
    login! @current_user # to refresh session timeout
  else
    # Something weird happened and the user's password data can no longer be found. Log him out to prevent
    # anything else from going wrong.
    logout!
  end
end

#authenticate_with_session_cookie ⇒ Object 



22
23
24
25
26
27
28
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 22

def authenticate_with_session_cookie
  if Auth.session_duration.nil? || session[:active_at] > Auth.session_duration.ago
    authenticate_with_persistence_token
  else
    timeout_current_session
  end
end

#authenticate_with_single_access_token ⇒ Object 



30
31
32
33
34
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 30

def authenticate_with_single_access_token
  # There is no session duration because this works per-request.
  password = Password.find_by_single_access_token(params[:single_access_token], :include => :authenticatable)
  @current_user = password.authenticatable if password
end

#current_user ⇒ Object 



7
8
9
10
11
12
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 7

def current_user
  return @current_user unless @current_user.nil?
  @current_user = false
  authenticate_current_user
  @current_user
end

#timeout_current_session ⇒ Object 



48
49
50
51
52
53
 
# File 'lib/auth/behavior/core/controller_extensions/current_user.rb', line 48

def timeout_current_session
  logout!
  # We'll put the message in the notice, but if the current page requires a login, the flash will be over
  # written. That's where @session_timeout_message comes in.
  flash[:notice] = @session_timeout_message = Auth.session_timeout_message
end