Module: Shaf::Session

Defined in:
lib/shaf/helpers/session.rb

Constant Summary collapse

SESSION_TTL =

2 days

60 * 60 * 24 * 2

Instance Method Summary collapse

Instance Method Details

#current_session ⇒ Object 



44
45
46
47
48
49
50
 
# File 'lib/shaf/helpers/session.rb', line 44

def current_session
  unless @current_session
    return unless current_user
    @current_session = Session.where(user_id: current_user.id).first
  end
  @current_session
end

#current_user ⇒ Object 



34
35
36
37
38
39
40
41
42
 
# File 'lib/shaf/helpers/session.rb', line 34

def current_user
  unless defined?(@current_user) && @current_user
    return unless request.env.key? 'HTTP_X_AUTH_TOKEN'
    digest = Digest::SHA256.hexdigest(request.env['HTTP_X_AUTH_TOKEN'])
    session = Session.where(auth_token_digest: digest).first
    @current_user = User[session.user_id] if session&.valid?
  end
  @current_user
end

#extend_session(session) ⇒ Object 



23
24
25
26
27
28
 
# File 'lib/shaf/helpers/session.rb', line 23

def extend_session(session)
  return unless session
  session.update(expire_at: Time.now + SESSION_TTL)
  session.auth_token = request.env['HTTP_X_AUTH_TOKEN']
  session
end

#login(email, password) ⇒ Object 



8
9
10
11
12
13
14
15
16
17
18
19
20
21
 
# File 'lib/shaf/helpers/session.rb', line 8

def (email, password)
  return unless email && password
  user = User.first(email: email) or return
  bcrypt = BCrypt::Password.new(user.password_digest)
  return unless bcrypt == password
  @current_user = user

  Session.where(user_id: user.id).delete
  params = {
    user_id: user.id,
    expire_at: Time.now + SESSION_TTL,
  }
  Session.create(params)
end

#logout ⇒ Object 



30
31
32
 
# File 'lib/shaf/helpers/session.rb', line 30

def logout
  current_session&.destroy
end