Contents

module Shoppe
  class SessionsController < Shoppe::ApplicationController
    layout 'shoppe/sub'
    skip_before_filter :login_required, :only => [:new, :create, :reset]
  
    def create
      if user = Shoppe::User.authenticate(params[:email_address], params[:password])
        session[:shoppe_user_id] = user.id
        redirect_to :orders
      else
        flash.now[:alert] = "The email address and/or password you have entered is invalid. Please check and try again."
        render :action => "new"
      end
    end
  
    def destroy
      session[:shoppe_user_id] = nil
      redirect_to :login
    end
  
    def reset
    
      if request.post?
        if user = Shoppe::User.find_by_email_address(params[:email_address])
          user.reset_password!
          redirect_to login_path(:email_address => params[:email_address]), :notice => "An e-mail has been sent to #{user.email_address} with a new password"
        else
          flash.now[:alert] = "No user was found matching the e-mail address"
        end
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
shoppe-0.0.15	app/controllers/shoppe/sessions_controller.rb