97 lines
2.4 KiB
Ruby
97 lines
2.4 KiB
Ruby
class UsersController < ApplicationController
|
|
|
|
before_action :find_user, only: [:edit, :update]
|
|
before_action :ensure_unauthenticated, only: [:new, :create]
|
|
|
|
# POST /users
|
|
def create
|
|
# Verify that GreenLight is configured to allow user signup.
|
|
return unless Rails.configuration.allow_user_signup
|
|
|
|
@user = User.new(user_params)
|
|
@user.provider = "greenlight"
|
|
|
|
if @user.save
|
|
login(@user)
|
|
else
|
|
# Handle error on user creation.
|
|
render :new
|
|
end
|
|
end
|
|
|
|
# GET /signup
|
|
def new
|
|
if Rails.configuration.allow_user_signup
|
|
@user = User.new
|
|
else
|
|
redirect_to root_path
|
|
end
|
|
end
|
|
|
|
# GET /users/:user_uid/edit
|
|
def edit
|
|
if current_user
|
|
redirect_to current_user.room unless @user == current_user
|
|
else
|
|
redirect_to root_path
|
|
end
|
|
end
|
|
|
|
# PATCH /users/:user_uid
|
|
def update
|
|
# Update account information if passed.
|
|
@user.name = user_params[:name] if user_params[:name]
|
|
@user.email = user_params[:email] if user_params[:email]
|
|
@user.image = user_params[:image] if user_params[:image]
|
|
|
|
# Custom errors not generated by validations.
|
|
errors = {}
|
|
|
|
# Verify that the provided password is correct.
|
|
if user_params[:password]
|
|
if @user.authenticate(user_params[:password])
|
|
# Verify that the new passwords match.
|
|
if user_params[:new_password] == user_params[:password_confirmation]
|
|
@user.password = user_params[:new_password]
|
|
else
|
|
# New passwords don't match.
|
|
errors[:password_confirmation] = "'s don't match"
|
|
end
|
|
else
|
|
# Original password is incorrect, can't update.
|
|
errors[:password] = "is incorrect"
|
|
end
|
|
end
|
|
|
|
if @user.save!
|
|
# Notify the use that their account has been updated.
|
|
redirect_to edit_user_path(@user), notice: "Information successfully updated."
|
|
else
|
|
# Append custom errors.
|
|
errors.each do |k, v| @user.errors.add(k, v) end
|
|
|
|
# Handle validation errors.
|
|
render :edit
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def find_user
|
|
@user = User.find_by(uid: params[:user_uid])
|
|
|
|
unless @user
|
|
# Handle user does not exist.
|
|
|
|
end
|
|
end
|
|
|
|
def ensure_unauthenticated
|
|
redirect_to current_user.main_room if current_user
|
|
end
|
|
|
|
def user_params
|
|
params.require(:user).permit(:name, :email, :image, :password, :password_confirmation, :new_password, :provider)
|
|
end
|
|
end
|