Contents

module Admin
  class InvitesController < Admin::AdminController
    before_action :require_authentication, except: [:accept, :show]
    before_action :find_invite, only: [:show, :edit, :update, :destroy, :accept]
    before_action :require_valid_token, only: [:show, :accept]

    require_authorization(
      Invite,
      proc { @invite },
      member:     [:show, :edit, :update, :destroy],
      collection: [:index, :new, :create]
    )

    def index
      redirect_to admin_users_url
    end

    def accept
      @user = @invite.create_user(user_params)
      if @user.valid?
        authenticate!(@user)
        redirect_to admin_default_url
      else
        render action: :show
      end
    end

    def show
      @user = User.new(email: @invite.email)
    end

    def new
      @invite = current_user.invites.new
      Role.roles.each do |role|
        @invite.roles.new(name: role.name) if role.default
      end
    end

    def create
      @invite = current_user.invites.create(invite_params)
      if @invite.valid?
        deliver_invite(@invite)
        @invite.update(sent_at: Time.now.utc)
        redirect_to admin_invites_url
      else
        render action: :new
      end
    end

    def destroy
      flash[:notice] = "The invite to #{@invite.email} has been deleted"
      @invite.destroy
      redirect_to admin_invites_url
    end

    private

    def deliver_invite(invite)
      AdminMailer.invite(
        invite,
        admin_invite_with_token_url(invite, invite.token)
      ).deliver_now
    end

    def find_invite
      @invite = Invite.find(params[:id])
    end

    def user_params
      params.require(:user).permit(:name, :email, :password, :confirm_password)
    end

    def invite_params
      params.require(:invite).permit(:email, role_names: [])
    end

    def require_valid_token
      return if @invite && secure_compare(@invite.token, params[:token])
      flash[:notice] = "Invalid invite token"
      redirect_to(login_admin_users_url) && return
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
pages_core-3.5.1	app/controllers/admin/invites_controller.rb