Contents

# frozen_string_literal: true

module QuoVadis
  class Account < ActiveRecord::Base

    MAX_NUMBER_OF_RECOVERY_CODES = 5

    belongs_to :model, polymorphic: true

    has_one :password, dependent: :destroy
    has_many :sessions, dependent: :destroy
    has_one :totp, dependent: :destroy
    has_many :recovery_codes, dependent: :destroy
    has_many :logs, dependent: :destroy

    validates :identifier, presence: true, uniqueness: {case_sensitive: false}

    after_update :log_identifier_change, if: :saved_change_to_identifier?
    after_update :notify_identifier_change, if: :saved_change_to_identifier?

    def confirmed?
      confirmed_at.present?
    end

    def confirmed!
      touch :confirmed_at
    end

    def has_two_factors?
      password.present? && totp.present?
    end

    # Returns an array of the recovery codes' codes.
    def generate_recovery_codes
      Array.new(MAX_NUMBER_OF_RECOVERY_CODES) { recovery_codes.create }.map &:code
    end

    private

    def log_identifier_change
      from, to = saved_change_to_identifier
      Log.create(
        account:  self,
        action:   Log::IDENTIFIER_CHANGE,
        ip:       (CurrentRequestDetails.ip || ''),
        metadata: {from: from, to: to}
      )
    end

    def notify_identifier_change
      # No need to notify if the identifier is :email because
      # the email-is-changed notification in the model mixin handles it.
      QuoVadis.notify(:identifier_change_notification,
        email: model.email,
        identifier: QuoVadis.humanise_identifier(model.class.name).downcase
      ) unless QuoVadis.identifier(model.class.name) == :email
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
quo_vadis-2.1.0	app/models/quo_vadis/account.rb
quo_vadis-2.0.2	app/models/quo_vadis/account.rb
quo_vadis-2.0.1	app/models/quo_vadis/account.rb
quo_vadis-2.0.0	app/models/quo_vadis/account.rb