forked from OpenNeo/impress
60 lines
1.6 KiB
Ruby
60 lines
1.6 KiB
Ruby
class AuthUsersController < ApplicationController
|
|
before_action :authenticate_user!, except: [:new, :create]
|
|
|
|
def create
|
|
@auth_user = AuthUser.create(auth_user_params)
|
|
|
|
if @auth_user.persisted?
|
|
sign_in :auth_user, @auth_user
|
|
flash[:notice] = "Welcome to Dress to Impress, #{@auth_user.name}! 💖"
|
|
redirect_to root_path
|
|
else
|
|
render action: :new, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def edit
|
|
@auth_user = current_auth_user
|
|
end
|
|
|
|
def new
|
|
@auth_user = AuthUser.new
|
|
end
|
|
|
|
def update
|
|
@auth_user = load_auth_user
|
|
|
|
# If the user has a password, then the `current_password` field is required
|
|
# when updating. If not, then it's not!
|
|
success = @auth_user.uses_password? ?
|
|
@auth_user.update_with_password(auth_user_params) :
|
|
@auth_user.update(auth_user_params)
|
|
|
|
if success
|
|
# NOTE: Changing the password will sign you out, so make sure we stay
|
|
# signed in!
|
|
bypass_sign_in @auth_user, scope: :auth_user
|
|
|
|
flash[:notice] = "Settings successfully saved."
|
|
redirect_to action: :edit
|
|
else
|
|
render action: :edit, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def auth_user_params
|
|
params.require(:auth_user).permit(:name, :email, :password,
|
|
:password_confirmation, :current_password)
|
|
end
|
|
|
|
def load_auth_user
|
|
# Well, what we *actually* do is just use `current_auth_user`, and enforce
|
|
# that the provided user ID matches. The user ID param is only really for
|
|
# REST semantics and such!
|
|
raise AccessDenied unless auth_user_signed_in?
|
|
raise AccessDenied unless current_auth_user.id == params[:id].to_i
|
|
current_auth_user
|
|
end
|
|
end
|