Sha256: 9652810c9eb9bd432b5e3fa2e8e322cba82ae6861e2f1f58526e877d2884c3da
Contents?: true
Size: 1.35 KB
Versions: 9
Compression:
Stored size: 1.35 KB
Contents
# :namespace
module Tokens
# A token that verifies the user's ownership of their e-mail address.
class EmailVerification < OneTime
# The e-mail address verified by this token.
#
# Note that it's useful to keep track of the exact e-mail address that the
# token vouches for, even if an application only allows a single e-mail per
# user. Otherwise, a user might be able to change their e-mail address and
# then use the token to verify the ownership of the wrong address.
alias_attribute :email, :key
validates :email, :presence => true
# Creates a token with a random code that verifies the given e-mail address.
def self.random_for(email_credential)
super email_credential.user, email_credential.email, self
end
# Marks the e-mail associated with the token as verified.
#
# Returns the token instance.
def spend
self.transaction do
if credential = email_credential
credential.verified = true
credential.save!
end
super
end
end
# The credential whose ownership is verified by this token.
#
# This method might return nil if a user is trying to take advantage of a race
# condition and changes her e-mail address before using the token.
def email_credential
user.credentials.find { |c| c.name == email }
end
end # class Tokens::EmailVerification
end # namespace Tokens
Version data entries
9 entries across 9 versions & 1 rubygems