63 lines
1.6 KiB
Ruby
63 lines
1.6 KiB
Ruby
class ApplicationController < ActionController::Base
|
|
# Prevent CSRF attacks by raising an exception.
|
|
# For APIs, you may want to use :null_session instead.
|
|
protect_from_forgery with: :exception
|
|
|
|
before_filter :create_user_token
|
|
|
|
# Do not mention passwords in the log file
|
|
# filter_parameter_logging :password
|
|
|
|
# AuthLogic
|
|
helper_method :current_user_session, :current_user
|
|
|
|
# Assign the visitor a unique hash so that we can track their uploads
|
|
# and show them even before moderation.
|
|
def create_user_token
|
|
session[:token] ||= SecureRandom.hex
|
|
session[:ip] ||= request.remote_ip
|
|
end
|
|
|
|
# -----------------
|
|
private
|
|
|
|
def current_user_session
|
|
return @current_user_session if defined?(@current_user_session)
|
|
@current_user_session = UserSession.find
|
|
end
|
|
|
|
def current_user
|
|
return @current_user if defined?(@current_user)
|
|
@current_user = current_user_session && current_user_session.user
|
|
end
|
|
|
|
def require_user
|
|
logger.debug "ApplicationController::require_user"
|
|
unless current_user
|
|
store_location
|
|
flash[:notice] = "You must be logged in to access this page"
|
|
redirect_to new_user_session_url
|
|
return false
|
|
end
|
|
end
|
|
|
|
def require_no_user
|
|
logger.debug "ApplicationController::require_no_user"
|
|
if current_user
|
|
store_location
|
|
flash[:notice] = "You must be logged out to access this page"
|
|
# redirect_to home_index_path
|
|
return false
|
|
end
|
|
end
|
|
|
|
def store_location
|
|
#session[:return_to] = request.request_uri
|
|
end
|
|
|
|
def redirect_back_or_default(default)
|
|
redirect_to(session[:return_to] || default)
|
|
session[:return_to] = nil
|
|
end
|
|
|
|
end
|