9649b192c0
- Add preferred provider for authorization to login and signup pages. To use, the 3rd party application would have to add `preferred_provider=...` parameter to OAuth2 authorization request. - Resize 3rd party provider icons - Add "login to authorize" heading to login and signup screens
57 lines
1.7 KiB
Ruby
57 lines
1.7 KiB
Ruby
class SessionsController < ApplicationController
|
|
include SessionMethods
|
|
|
|
layout "site"
|
|
|
|
before_action :disable_terms_redirect, :only => [:destroy]
|
|
before_action :authorize_web
|
|
before_action :set_locale
|
|
before_action :check_database_readable
|
|
before_action :require_cookies, :only => [:new]
|
|
|
|
authorize_resource :class => false
|
|
|
|
def new
|
|
override_content_security_policy_directives(:form_action => []) if Settings.csp_enforce || Settings.key?(:csp_report_url)
|
|
|
|
session[:referer] = safe_referer(params[:referer]) if params[:referer]
|
|
|
|
parse_oauth_referer session[:referer]
|
|
end
|
|
|
|
def create
|
|
session[:remember_me] ||= params[:remember_me]
|
|
session[:referer] = safe_referer(params[:referer]) if params[:referer]
|
|
password_authentication(params[:username].strip, params[:password])
|
|
end
|
|
|
|
def destroy
|
|
@title = t ".title"
|
|
|
|
if request.post?
|
|
session.delete(:pending_user)
|
|
session.delete(:user)
|
|
session_expires_automatically
|
|
|
|
referer = safe_referer(params[:referer]) if params[:referer]
|
|
|
|
redirect_to referer || { :controller => "site", :action => "index" }
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
##
|
|
# handle password authentication
|
|
def password_authentication(username, password)
|
|
if (user = User.authenticate(:username => username, :password => password))
|
|
successful_login(user)
|
|
elsif (user = User.authenticate(:username => username, :password => password, :pending => true))
|
|
unconfirmed_login(user)
|
|
elsif User.authenticate(:username => username, :password => password, :suspended => true)
|
|
failed_login({ :partial => "sessions/suspended_flash" }, username)
|
|
else
|
|
failed_login t("sessions.new.auth failure"), username
|
|
end
|
|
end
|
|
end
|