Class: DeviseTokenAuth::RegistrationsController

Inherits:
ApplicationController
  • Object
show all
Defined in:
app/controllers/devise_token_auth/registrations_controller.rb

Instance Method Summary collapse

Instance Method Details

#account_update_params ⇒ Object 



119
120
121
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 119

def 
  params.permit(devise_parameter_sanitizer.for(:account_update))
end

#create ⇒ Object 



8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 8

def create
  @resource            = resource_class.new()
  @resource.provider   = "email"

  # honor devise configuration for case_insensitive_keys
  if resource_class.case_insensitive_keys.include?(:email)
    @resource.email = [:email].downcase
  else
    @resource.email = [:email]
  end

  # success redirect url is required
  unless params[:confirm_success_url]
    return render json: {
      status: 'error',
      data:   @resource,
      errors: ["Missing `confirm_success_url` param."]
    }, status: 403
  end

  begin
    # override email confirmation, must be sent manually from ctrl
    resource_class.skip_callback("create", :after, :send_on_create_confirmation_instructions)
    if @resource.save

      unless @resource.confirmed?
        # user will require email authentication
        @resource.send_confirmation_instructions({
          client_config: params[:config_name],
          redirect_url: params[:confirm_success_url]
        })

      else
        # email auth has been bypassed, authenticate user
        @client_id = SecureRandom.urlsafe_base64(nil, false)
        @token     = SecureRandom.urlsafe_base64(nil, false)

        @resource.tokens[@client_id] = {
          token: BCrypt::Password.create(@token),
          expiry: (Time.now + DeviseTokenAuth.token_lifespan).to_i
        }

        @resource.save!

        update_auth_header
      end

      render json: {
        status: 'success',
        data:   @resource.as_json
      }
    else
      clean_up_passwords @resource
      render json: {
        status: 'error',
        data:   @resource,
        errors: @resource.errors.to_hash.merge(full_messages: @resource.errors.full_messages)
      }, status: 403
    end
  rescue ActiveRecord::RecordNotUnique
    clean_up_passwords @resource
    render json: {
      status: 'error',
      data:   @resource,
      errors: ["An account already exists for #{@resource.email}"]
    }, status: 403
  end
end

#destroy ⇒ Object 



99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 99

def destroy
  if @resource
    @resource.destroy

    render json: {
      status: 'success',
      message: "Account with uid #{@resource.uid} has been destroyed."
    }
  else
    render json: {
      status: 'error',
      errors: ["Unable to locate account for destruction."]
    }, status: 404
  end
end

#sign_up_params ⇒ Object 



115
116
117
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 115

def 
  params.permit(devise_parameter_sanitizer.for(:sign_up))
end

#update ⇒ Object 



77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 77

def update
  if @resource
    
    if @resource.update_attributes()
      render json: {
        status: 'success',
        data:   @resource.as_json
      }
    else
      render json: {
        status: 'error',
        errors: @resource.errors
      }, status: 403
    end
  else
    render json: {
      status: 'error',
      errors: ["User not found."]
    }, status: 404
  end
end