Contents

class Clearance::ConfirmationsController < ApplicationController
  unloadable

  before_filter :forbid_confirmed_user,    :only => :new
  before_filter :forbid_missing_token,     :only => :new
  before_filter :forbid_non_existent_user, :only => :new
  filter_parameter_logging :token

  def new
    create
  end

  def create
    @user = ::User.find_by_id_and_token(params[:user_id], params[:token])
    @user.confirm_email!

    sign_user_in(@user)
    flash[:success] = "Confirmed email and signed in."
    redirect_to url_after_create
  end

  private

  def forbid_confirmed_user
    user = ::User.find_by_id(params[:user_id])
    if user && user.email_confirmed?
      raise ActionController::Forbidden, "confirmed user"
    end
  end

  def forbid_missing_token
    if params[:token].blank?
      raise ActionController::Forbidden, "missing token"
    end
  end

  def forbid_non_existent_user
    unless ::User.find_by_id_and_token(params[:user_id], params[:token])
      raise ActionController::Forbidden, "non-existent user"
    end
  end

  def url_after_create
    root_url
  end

end

Version data entries

5 entries across 5 versions & 2 rubygems

Version	Path
thoughtbot-clearance-0.6.1	app/controllers/clearance/confirmations_controller.rb
thoughtbot-clearance-0.6.2	app/controllers/clearance/confirmations_controller.rb
thoughtbot-clearance-0.6.3	app/controllers/clearance/confirmations_controller.rb
vita-clearance-0.6.2	app/controllers/clearance/confirmations_controller.rb
vita-clearance-0.6.3	app/controllers/clearance/confirmations_controller.rb