Contents

Spree::BaseController.class_eval do

  before_filter :set_current_user

  # graceful error handling for cancan authorization exceptions
  rescue_from CanCan::AccessDenied do |exception|
    return unauthorized
  end

  private

  # Redirect as appropriate when an access request fails.  The default action is to redirect to the login screen.
  # Override this method in your controllers if you want to have special behavior in case the user is not authorized
  # to access the requested action.  For example, a popup window might simply close itself.
  def unauthorized
    respond_to do |format|
      format.html do
        if current_user
          flash.now[:error] = I18n.t(:authorization_failure)
          render 'shared/unauthorized', :layout => 'spree_application'
        else
          flash[:error] = I18n.t(:authorization_failure)
          store_location
          redirect_to login_path and return
        end
      end
      format.xml do
        request_http_basic_authentication 'Web Password'
      end
      format.json do
        render :text => "Not Authorized \n", :status => 401
      end
    end
  end

  def store_location
    # disallow return to login, logout, signup pages
    disallowed_urls = [signup_url, login_url, destroy_user_session_path]
    disallowed_urls.map!{|url| url[/\/\w+$/]}
    unless disallowed_urls.include?(request.fullpath)
      session["user_return_to"] = request.fullpath
    end
  end

  def set_current_user
    User.current = current_user
  end

end

Version data entries

25 entries across 25 versions & 7 rubygems

Version	Path
spree_auth-0.60.0	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.60.0.RC1	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.50.2	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.50.1	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.50.0	app/controllers/spree/base_controller_decorator.rb