Class: DeviseTokenAuth::RegistrationsController

Inherits:
ApplicationController show all
Defined in:
app/controllers/devise_token_auth/registrations_controller.rb

Instance Method Summary collapse

Methods inherited from ApplicationController

#error_messages, #error_serializer, #success_message

Instance Method Details

#account_update_params ⇒ Object 



90
91
92
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 90

def 
  devise_parameter_sanitizer.sanitize(:account_update)
end

#build_resource(hash = nil) ⇒ Object 



82
83
84
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 82

def build_resource(hash=nil)
  self.resource = resource_class.new_with_session(hash || {}, session)
end

#create ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 9

def create
  build_resource()

  resource.uid        = [resource_class.authentication_keys.first]

  # success redirect url is required
  unless !defined?(resource.confirmed?) or params[:confirm_success_url]
    return render json: {
      status: 'error',
      data:   resource,
      errors: ["Missing `confirm_success_url` param."]
    }, status: 403
  end

  begin
     # override email confirmation, must be sent manually from ctrl
    User.skip_callback("create", :after, :send_on_create_confirmation_instructions)

   if resource.save
      if defined?(resource.confirmed?) and !resource.confirmed?
        resource.send_confirmation_instructions({
          client_config: params[:config_name],
          redirect_url: params[:confirm_success_url]
        })
      else
        # email auth has been bypassed, authenticate user
        @user      = resource
        @client_id = SecureRandom.urlsafe_base64(nil, false)
        @token     = SecureRandom.urlsafe_base64(nil, false)

        @user.tokens[@client_id] = {
          token: BCrypt::Password.create(@token),
          expiry: (Time.now + DeviseTokenAuth.token_lifespan).to_i
        }

        @user.save!

        update_auth_header
      end

      render json: resource_serializer(resource)
    else
      clean_up_passwords resource
      render json: error_serializer(resource), status: 403
    end
  rescue ActiveRecord::RecordNotUnique
    clean_up_passwords resource
    render json: error_serializer(resource, "An account already exists for #{resource.send(resource_class.authentication_keys.first)}"), status: 403
  end
end

#destroy ⇒ Object 



72
73
74
75
76
77
78
79
80
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 72

def destroy
  if @user
    @user.destroy

    render json: success_message("Account with uid #{@user.uid} has been destroyed.")
  else
    render json: error_messages("Unable to locate account for destruction."), status: 404
  end
end

#resource_serializer(user) ⇒ Object 



94
95
96
97
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 94

def resource_serializer(user)
  serializer = DeviseTokenAuth.registration_serializer || ResourceSerializer
  serializer.new(user)
end

#sign_up_params ⇒ Object 



86
87
88
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 86

def 
  devise_parameter_sanitizer.sanitize(:sign_up)
end

#update ⇒ Object 



60
61
62
63
64
65
66
67
68
69
70
 
# File 'app/controllers/devise_token_auth/registrations_controller.rb', line 60

def update
  if @user
    if @user.update_attributes()
      render json: resource_serializer(@user)
    else
      render json: error_serializer(@user), status: 403
    end
  else
    render json: error_messages("User not found."), status: 404
  end
end