6c1d73a509
This PR allows users to delete their own accounts. The logic implemented matches that currently used by the admins when they manually close accounts, although there is room to be more complex in future e.g. completely removing accounts with no content. The error handling has been slightly adapted for namespaced controllers, by anchoring the controller name with a leading forward slash.
64 lines
1.8 KiB
Ruby
64 lines
1.8 KiB
Ruby
class AccountsController < ApplicationController
|
|
include SessionMethods
|
|
include UserMethods
|
|
|
|
layout "site"
|
|
|
|
before_action :authorize_web
|
|
before_action :set_locale
|
|
|
|
authorize_resource :class => false
|
|
|
|
before_action :check_database_readable
|
|
before_action :check_database_writable, :only => [:update]
|
|
before_action :allow_thirdparty_images, :only => [:edit, :update]
|
|
|
|
def edit
|
|
@tokens = current_user.oauth_tokens.authorized
|
|
|
|
append_content_security_policy_directives(
|
|
:form_action => %w[accounts.google.com *.facebook.com login.live.com github.com meta.wikimedia.org]
|
|
)
|
|
|
|
if errors = session.delete(:user_errors)
|
|
errors.each do |attribute, error|
|
|
current_user.errors.add(attribute, error)
|
|
end
|
|
end
|
|
@title = t ".title"
|
|
end
|
|
|
|
def update
|
|
@tokens = current_user.oauth_tokens.authorized
|
|
|
|
append_content_security_policy_directives(
|
|
:form_action => %w[accounts.google.com *.facebook.com login.live.com github.com meta.wikimedia.org]
|
|
)
|
|
|
|
user_params = params.require(:user).permit(:display_name, :new_email, :pass_crypt, :pass_crypt_confirmation, :auth_provider)
|
|
|
|
if params[:user][:auth_provider].blank? ||
|
|
(params[:user][:auth_provider] == current_user.auth_provider &&
|
|
params[:user][:auth_uid] == current_user.auth_uid)
|
|
update_user(current_user, user_params)
|
|
if current_user.errors.count.zero?
|
|
redirect_to edit_account_path
|
|
else
|
|
render :edit
|
|
end
|
|
else
|
|
session[:new_user_settings] = user_params.to_h
|
|
redirect_to auth_url(params[:user][:auth_provider], params[:user][:auth_uid]), :status => :temporary_redirect
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
current_user.soft_destroy!
|
|
|
|
session.delete(:user)
|
|
session_expires_automatically
|
|
|
|
flash[:notice] = t ".success"
|
|
redirect_to root_path
|
|
end
|
|
end
|