--- /dev/null
+class UserController < ApplicationController
+ model :user
+
+ # Override this function in your own application to define a custom home action.
+ def home
+ if user?
+ @fullname = "#{current_user.firstname} #{current_user.lastname}"
+ else
+ @fullname = "Not logged in..."
+ end # this is a bit of a hack since the home action is used to verify user
+ # keys, where noone is logged in. We should probably create a unique
+ # 'validate_key' action instead.
+ end
+
+ # The action used to log a user in. If the user was redirected to the login page
+ # by the login_required method, they should be sent back to the page they were
+ # trying to access. If not, they will be sent to "/user/home".
+ def login
+ return if generate_blank
+ @user = User.new(params[:user])
+ if session[:user] = User.authenticate(params[:user][:login], params[:user][:password])
+ session[:user].logged_in_at = Time.now
+ session[:user].save
+ flash[:notice] = 'Login successful'
+ redirect_to_stored_or_default :action => 'home'
+ else
+ @login = params[:user][:login]
+ flash.now[:warning] = 'Login unsuccessful'
+ end
+ end
+
+ # Register as a new user. Upon successful registration, the user will be sent to
+ # "/user/login" to enter their details.
+ def signup
+ return if generate_blank
+ params[:user].delete('form')
+ params[:user].delete('verified') # you CANNOT pass this as part of the request
+ @user = User.new(params[:user])
+ begin
+ User.transaction(@user) do
+ @user.new_password = true
+ unless LoginEngine.config(:use_email_notification) and LoginEngine.config(:confirm_account)
+ @user.verified = 1
+ end
+ if @user.save
+ key = @user.generate_security_token
+ url = url_for(:action => 'home', :user_id => @user.id, :key => key)
+ flash[:notice] = 'Signup successful!'
+ if LoginEngine.config(:use_email_notification) and LoginEngine.config(:confirm_account)
+ UserNotify.deliver_signup(@user, params[:user][:password], url)
+ flash[:notice] << ' Please check your registered email account to verify your account registration and continue with the login.'
+ else
+ flash[:notice] << ' Please log in.'
+ end
+ redirect_to :action => 'login'
+ end
+ end
+ rescue Exception => e
+ flash.now[:notice] = nil
+ flash.now[:warning] = 'Error creating account: confirmation email not sent'
+ logger.error "Unable to send confirmation E-Mail:"
+ logger.error e
+ end
+ end
+
+ def logout
+ session[:user] = nil
+ redirect_to :action => 'login'
+ end
+
+ def change_password
+ return if generate_filled_in
+ if do_change_password_for(@user)
+ # since sometimes we're changing the password from within another action/template...
+ #redirect_to :action => params[:back_to] if params[:back_to]
+ redirect_back_or_default :action => 'change_password'
+ end
+ end
+
+ protected
+ def do_change_password_for(user)
+ begin
+ User.transaction(user) do
+ user.change_password(params[:user][:password], params[:user][:password_confirmation])
+ if user.save
+ if LoginEngine.config(:use_email_notification)
+ UserNotify.deliver_change_password(user, params[:user][:password])
+ flash[:notice] = "Updated password emailed to #{@user.email}"
+ else
+ flash[:notice] = "Password updated."
+ end
+ return true
+ else
+ flash[:warning] = 'There was a problem saving the password. Please retry.'
+ return false
+ end
+ end
+ rescue
+ flash[:warning] = 'Password could not be changed at this time. Please retry.'
+ end
+ end
+
+ public
+
+
+ def forgot_password
+ # Always redirect if logged in
+ if user?
+ flash[:message] = 'You are currently logged in. You may change your password now.'
+ redirect_to :action => 'change_password'
+ return
+ end
+
+ # Email disabled... we are unable to provide the password
+ if !LoginEngine.config(:use_email_notification)
+ flash[:message] = "Please contact the system admin at #{LoginEngine.config(:admin_email)} to reset your password."
+ redirect_back_or_default :action => 'login'
+ return
+ end
+
+ # Render on :get and render
+ return if generate_blank
+
+ # Handle the :post
+ if params[:user][:email].empty?
+ flash.now[:warning] = 'Please enter a valid email address.'
+ elsif (user = User.find_by_email(params[:user][:email])).nil?
+ flash.now[:warning] = "We could not find a user with the email address #{params[:user][:email]}"
+ else
+ begin
+ User.transaction(user) do
+ key = user.generate_security_token
+ url = url_for(:action => 'change_password', :user_id => user.id, :key => key)
+ UserNotify.deliver_forgot_password(user, url)
+ flash[:notice] = "Instructions on resetting your password have been emailed to #{params[:user][:email]}"
+ end
+ unless user?
+ redirect_to :action => 'login'
+ return
+ end
+ redirect_back_or_default :action => 'home'
+ rescue
+ flash.now[:warning] = "Your password could not be emailed to #{params[:user][:email]}"
+ end
+ end
+ end
+
+ def edit
+ return if generate_filled_in
+ do_edit_user(@user)
+ end
+
+ protected
+ def do_edit_user(user)
+ begin
+ User.transaction(user) do
+ user.attributes = params[:user].delete_if { |k,v| not LoginEngine.config(:changeable_fields).include?(k) }
+ if user.save
+ flash[:notice] = "User details updated"
+ else
+ flash[:warning] = "Details could not be updated! Please retry."
+ end
+ end
+ rescue
+ flash.now[:warning] = "Error updating user details. Please try again later."
+ end
+ end
+
+ public
+
+ def delete
+ get_user_to_act_on
+ if do_delete_user(@user)
+ logout
+ else
+ redirect_back_or_default :action => 'home'
+ end
+ end
+
+ protected
+ def do_delete_user(user)
+ begin
+ if LoginEngine.config(:delayed_delete)
+ User.transaction(user) do
+ key = user.set_delete_after
+ if LoginEngine.config(:use_email_notification)
+ url = url_for(:action => 'restore_deleted', :user_id => user.id, :key => key)
+ UserNotify.deliver_pending_delete(user, url)
+ end
+ end
+ else
+ destroy(@user)
+ end
+ return true
+ rescue
+ if LoginEngine.config(:use_email_notification)
+ flash.now[:warning] = 'The delete instructions were not sent. Please try again later.'
+ else
+ flash.now[:notice] = 'The account has been scheduled for deletion. It will be removed in #{LoginEngine.config(:delayed_delete_days)} days.'
+ end
+ return false
+ end
+ end
+
+ public
+
+ def restore_deleted
+ get_user_to_act_on
+ @user.deleted = 0
+ if not @user.save
+ flash.now[:warning] = "The account for #{@user['login']} was not restored. Please try the link again."
+ redirect_to :action => 'login'
+ else
+ redirect_to :action => 'home'
+ end
+ end
+
+ protected
+
+ def destroy(user)
+ UserNotify.deliver_delete(user) if LoginEngine.config(:use_email_notification)
+ flash[:notice] = "The account for #{user['login']} was successfully deleted."
+ user.destroy()
+ end
+
+ def protect?(action)
+ if ['login', 'signup', 'forgot_password'].include?(action)
+ return false
+ else
+ return true
+ end
+ end
+
+ # Generate a template user for certain actions on get
+ def generate_blank
+ case request.method
+ when :get
+ @user = User.new
+ render
+ return true
+ end
+ return false
+ end
+
+ # Generate a template user for certain actions on get
+ def generate_filled_in
+ get_user_to_act_on
+ case request.method
+ when :get
+ render
+ return true
+ end
+ return false
+ end
+
+ # returns the user object this method should act upon; only really
+ # exists for other engines operating on top of this one to redefine...
+ def get_user_to_act_on
+ @user = session[:user]
+ end
+end
projects / selectricity-live / blobdiff