Class: Admin::SessionsController

Inherits:
Tolaria::TolariaController show all
Defined in:
app/controllers/admin/sessions_controller.rb

Instance Method Summary collapse

Instance Method Details

#create ⇒ Object

Create: Attempt to sign in the admin with the email/passcode combination.



57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
 
# File 'app/controllers/admin/sessions_controller.rb', line 57

def create

  email = params[:administrator].try(:[], :email).to_s.downcase.chomp
  passcode = params[:administrator].try(:[], :passcode).to_s

  @administrator = Administrator.find_by_email(email)

  if @administrator && @administrator.authenticate!(passcode)

    # Auth successful
    # Set an signed admin cookie with our auth_token
    cookies.encrypted[:admin_auth_token] = {
      value: @administrator.auth_token,
      expires: params[:remember_me].eql?("1") ? 1.year.from_now : nil,
      secure: Rails.env.production?, # Expect a TLS connection in production
      httponly: true, # JavaScript should not read this cookie
    }

    # Redirect to the admin pane
    return redirect_to(Tolaria.config.default_redirect, status:303)

  else

    # Auth failed
    flash[:error] = "That passcode wasn’t correct. Please request a new passcode and try again."
    return redirect_to(admin_new_session_path, status:303)

  end

end

#destroy ⇒ Object

Destroy: Sign out the admin and reset the session



90
91
92
93
94
95
 
# File 'app/controllers/admin/sessions_controller.rb', line 90

def destroy
  cookies.delete(:admin_auth_token)
  reset_session
  flash[:success] = "You have successfully signed out."
  return redirect_to(admin_new_session_path, status:303)
end

#new ⇒ Object

Present the signin form



7
8
9
10
11
12
13
14
 
# File 'app/controllers/admin/sessions_controller.rb', line 7

def new
  if current_administrator
    return redirect_to(Tolaria.config.default_redirect, status:303)
  end
  @greeting = random_greeting
  @admin = Administrator.new
  return render "admin/session/form", layout:"admin/sessions"
end

#request_code ⇒ Object

Code request: Dispatch an email with the admin’s passcode, or return JSON errors



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
 
# File 'app/controllers/admin/sessions_controller.rb', line 18

def request_code

  email = params[:administrator].try(:[], :email).to_s.downcase.chomp
  @administrator = Administrator.find_by_email(email)

  unless @administrator
    response.status = 404
    return render json: {
      status: response.status,
      error: "That email address couldn’t be found. Contact an existing site administrator if you need an account created for you.",
    }
  end

  if @administrator.locked?
    response.status = 423
    return render json: {
      status: response.status,
      error: %{
        Your account has made too many requests and has been locked.
        Please try again after #{Tolaria.config.lockout_duration/60} minutes.
      }.squish,
    }
  end

  if @administrator.send_passcode_email!
    @administrator.accrue_strike!
    return head(204)
  else
    response.status = 500
    return render json: {
      status: response.status,
      error: "An email couldn’t be sent for you. Please try again later."
    }
  end

end