Contents

module DeviseTokenAuth
  class AuthController < ApplicationController
    respond_to :json

    def validate_token
      user = User.where(uid: params[:uid], auth_token: params[:auth_token]).first

      if not user.nil?
        render json: {
          success: true,
          data: user.as_json
        }
      else
        render json: {
          success: false,
          errors: ["Invalid login credentials"]
        }, status: 401
      end
    end

    def omniauth_success
      # find or create user by provider and provider uid
      @user = User.where({
        uid:      auth_hash['uid'],
        provider: auth_hash['provider'],
        email:    auth_hash['info']['email'],
      }).first_or_initialize

      # set crazy password for new oauth users. this is only used to prevent
      # access via email sign-in.
      unless @user.id
        p = SecureRandom.urlsafe_base64(nil, false)
        @user.password = p
        @user.password_confirmation = p
      end

      # sync user info with provider, update/generate auth token
      @user.update_attributes({
        nickname:   auth_hash['info']['nickname'],
        name:       auth_hash['info']['name'],
        image:      auth_hash['info']['image'],
        auth_token: SecureRandom.urlsafe_base64(nil, false)
      })

      # render user info to javascript postMessage communication window
      respond_to do |format|
        format.html { render :layout => "omniauth_response", :template => "devise_token_auth/omniauth_success" }
      end
    end

    def omniauth_failure
      render json: {
        success: false,
        errors: [params[:message]]
      }, status: 500
    end

    def auth_hash
      request.env['omniauth.auth']
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
devise_token_auth-0.1.2	app/controllers/devise_token_auth/auth_controller.rb
devise_token_auth-0.1.1	app/controllers/devise_token_auth/auth_controller.rb