mirror of
https://github.com/TracksApp/tracks.git
synced 2025-12-27 20:38:48 +01:00
8ff75f9b7d
Begin pulling apart the different paths through the login action to better understand how the action responds given different state.
79 lines
2.4 KiB
Ruby
79 lines
2.4 KiB
Ruby
class LoginController < ApplicationController
|
|
|
|
layout 'login'
|
|
skip_before_filter :set_session_expiration
|
|
skip_before_filter :login_required
|
|
before_filter :login_optional
|
|
before_filter :get_current_user
|
|
|
|
protect_from_forgery :except => [:check_expiry, :login]
|
|
|
|
def login
|
|
@page_title = "TRACKS::Login"
|
|
cookies[:preferred_auth] = prefered_auth? unless cookies[:preferred_auth]
|
|
case request.method
|
|
when 'POST'
|
|
if @user = User.authenticate(params['user_login'], params['user_password'])
|
|
return handle_post_success
|
|
else
|
|
handle_post_failure
|
|
end
|
|
when 'GET'
|
|
if User.no_users_yet?
|
|
return redirect_to signup_path
|
|
end
|
|
end
|
|
respond_to do |format|
|
|
format.html
|
|
format.m { render :action => 'login', :layout => 'mobile' }
|
|
end
|
|
end
|
|
|
|
def logout
|
|
logout_user
|
|
end
|
|
|
|
def check_expiry
|
|
# Gets called by periodically_call_remote to check whether
|
|
# the session has timed out yet
|
|
unless session == nil
|
|
if session
|
|
return unless should_expire_sessions?
|
|
# Get expiry time (allow ten seconds window for the case where we have none)
|
|
expiry_time = session['expiry_time'] || Time.now + 10
|
|
time_left = expiry_time - Time.now
|
|
@session_expired = ( time_left < (10*60) ) # Session will time out before the next check
|
|
end
|
|
end
|
|
respond_to do |format|
|
|
format.js
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def handle_post_success
|
|
session['user_id'] = @user.id
|
|
# If checkbox on login page checked, we don't expire the session after 1 hour
|
|
# of inactivity and we remember this user for future browser sessions
|
|
session['noexpiry'] = params['user_noexpiry']
|
|
msg = (should_expire_sessions?) ? "will expire after 1 hour of inactivity." : "will not expire."
|
|
notify :notice, "Login successful: session #{msg}"
|
|
cookies[:tracks_login] = { :value => @user.login, :expires => Time.now + 1.year, :secure => SITE_CONFIG['secure_cookies'] }
|
|
unless should_expire_sessions?
|
|
@user.remember_me
|
|
cookies[:auth_token] = { :value => @user.remember_token , :expires => @user.remember_token_expires_at, :secure => SITE_CONFIG['secure_cookies'] }
|
|
end
|
|
redirect_back_or_home
|
|
end
|
|
|
|
def handle_post_failure
|
|
@login = params['user_login']
|
|
notify :warning, t('login.unsuccessful')
|
|
end
|
|
|
|
def should_expire_sessions?
|
|
session['noexpiry'] != "on"
|
|
end
|
|
|
|
end
|