Module: LesliShield::AuthenticationInterface

Defined in:
app/interfaces/lesli_shield/authentication_interface.rb

Instance Method Summary collapse

Instance Method Details

#authenticate_request ⇒ Object

Validate user authentication and session status



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
 
# File 'app/interfaces/lesli_shield/authentication_interface.rb', line 5

def authenticate_request

    # this version Lesli requires to be mounted as root "/"
    # engine_path = Lesli::Engine.routes.find_script_name({})
    engine_path = nil

    # check if the users is logged into the system
    unless user_signed_in?()

        message = "Please Login to view that page!"

        # check if requested url is valid
        if (request.get? && is_navigational_format? && !request.xhr? && !request.fullpath.blank?)

            # redirect only if the path worth it
            if request.fullpath != "/"

                # redirect with requested url, so user will be redirected after login
                redirect_to("#{engine_path}/login?r=#{request.fullpath}", notice: message) and return

            end

        end

        # redirect to root route
        redirect_to("#{engine_path}/login", notice: message) and return

    end

    # run aditinal validations only for html requests
    return true unless request.format.html?

    # # get the current user session
    # current_session = current_user.sessions.find_by(id: session[:user_session_id])

    # # check if user has an active session
    # if current_session.equal? nil or !current_session.active?
    #     current_user.logs.create({ title: "system_session_logout", description: "session finished by the system"})
    #     sign_out current_user
    #     redirect_to "#{engine_path}/logout" and return
    # end

    # if !current_session.expiration_at.blank? && current_session.expiration_at < Time.current
    #     current_user.logs.create({ title: "system_session_logout", description: "session expired by the system"})
    #     sign_out current_user
    #     redirect_to "#{engine_path}/logout" and return
    # end

    # # check password expiration date
    # if current_user.has_expired_password?
    #     unless controller_name == "profiles"
    #         current_user.logs.create({ description: "redirect_due_to_expired_password" })
    #         redirect_to "/administration/profile#force-password-reset", notice: I18n.t("core.users/sessions.messages_danger_password_expired")
    #         return
    #     end
    # end

end