Class: Mg::MountainGoatController

Inherits:
Mg
  • Object
show all
Defined in:
lib/mountain-goat/controllers/mg/mountain_goat_controller.rb

Instance Method Summary collapse

Instance Method Details

#fetch ⇒ Object

Raises:

  • (ArgumentError) 


6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
 
# File 'lib/mountain-goat/controllers/mg/mountain_goat_controller.rb', line 6

def fetch
  ct = { :png => 'image/png', :css => 'text/css', :html => 'text/html', :js => 'text/javascript' }
  
  raise ArgumentError, "Invalid fetch file" if params[:file].match(/(([_][_])|([^a-z0-9_-]))/ix) #extra security
  
  #We will only serve files located in the public directory for security reasons
  Dir.open(File.join([File.dirname(__FILE__), '../../public/'])).each do |file|
    if file == params[:file].gsub('_','.')
      if file =~ /[.]([a-z0-9]+)$/
        response.headers['Content-Type'] = ct[$1.to_sym]
      end
      response.headers['Content-Disposition'] = 'inline'
      render :text => open(File.join([File.dirname(__FILE__), '../../public/', file]), "rb").read
      return
    end
  end
  
  render :file => "#{RAILS_ROOT}/public/404.html", :status => :not_found
end

#login ⇒ Object 



26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
 
# File 'lib/mountain-goat/controllers/mg/mountain_goat_controller.rb', line 26

def 
  mg_yml = nil
  begin
    mg_yml = YAML::load(File.open("#{RAILS_ROOT}/config/mountain-goat.yml"))
  rescue
  end

  if mg_yml
    mg_yml_env = mg_yml.with_indifferent_access[RAILS_ENV]
    if mg_yml_env
      flash[:error] = "<em>config/mountain-goat.yml</em> missing password (blank / missing) for current environment.  You cannot access mountain goat until you set the password for this environment." if mg_yml_env.with_indifferent_access[:password].blank?
    else
      flash[:error] = "<em>config/mountain-goat.yml</em> missing password for current environment '#{RAILS_ENV}'.  You cannot access mountain goat until you configure this file for this environment."
    end
  else
    flash[:error] = "<em>config/mountain-goat.yml</em> missing.  You cannot access mountain goat until you configure this file."
  end
end

#login_create ⇒ Object

Raises:

  • (ArgumentError) 


45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
 
# File 'lib/mountain-goat/controllers/mg/mountain_goat_controller.rb', line 45

def 
  raise ArgumentError, "Missing password" if !params.has_key?(:password)
  
  valid_password = nil
  begin
    valid_password = YAML::load(File.open("#{RAILS_ROOT}/config/mountain-goat.yml")).with_indifferent_access[RAILS_ENV].with_indifferent_access[:password]
  rescue
    raise ArgumentError, "config/mountain-goat.yml not properly configured"
  end
  raise ArgumentError, "config/mountain-goat.yml not properly configured" if valid_password.nil?
  
  if params[:password] == valid_password
    flash[:notice] = "You have successfully logged in."
    session[:mg_access] = true
    redirect_back_or_default '/mg'
  else
    flash[:notice] = "Incorrect password."
    render :login
  end
end