Class: Katello::FailedAuthenticationController

Inherits:
ActionController::Base
  • Object
show all
Defined in:
app/controllers/katello/failed_authentication_controller.rb

Instance Method Summary collapse

Instance Method Details

#unauthenticated ⇒ Object

In case Warden would fail this returns some reasonable output too warden stores it’s options, for API request a scope is :api, when the scope is nil it’s using a default one (currently :user that is used fo UI)



43
44
45
46
47
48
49
 
# File 'app/controllers/katello/failed_authentication_controller.rb', line 43

def unauthenticated
  if request.env['warden.options'][:scope] == :api
    unauthenticated_api
  else
    unauthenticated_ui
  end
end

#unauthenticated_api ⇒ Object

This method is called when warden stack cannot authenticate API request



31
32
33
34
35
36
37
38
 
# File 'app/controllers/katello/failed_authentication_controller.rb', line 31

def unauthenticated_api
  Rails.logger.warn "Request is unauthenticated_api for #{request.remote_ip}"
  m = "Invalid credentials"
  respond_to do |format|
    format.json { render :json => {:displayMessage => m, :errors => [m] }, :status => 401 }
    format.all  { render :text => m, :status => 401 }
  end
end

#unauthenticated_ui ⇒ Object

This method is called when warden stack cannot authenticate UI request



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
 
# File 'app/controllers/katello/failed_authentication_controller.rb', line 6

def unauthenticated_ui
  Rails.logger.warn "Request is unauthenticated_ui for #{request.remote_ip}"

  # The logic below will generate a flash vs using ApplicationController::errors.
  # The reason being, this controller purposely does not inherit from ApplicationController;
  # otherwise, these actions would report an error that user must be logged in to perform them.
  message = _("You have entered an incorrect username/password combination, or your account may currently be disabled. Please try again or contact your administrator.")

  respond_to do |format|
    format.all do
      if request.env['HTTP_X_FORWARDED_USER'].blank?
        path = new_user_session_url(:sso_tried => true)
      else
        message = _("You do not have valid credentials to access this system. Please contact your administrator.")
        path = show_user_session_url
      end

      redirect_to path
    end
  end

  return false
end