Contents

class Sso::SessionsController < ApplicationController

  before_action :authenticate_user!, only: :show
  before_action :doorkeeper_authorize!, only: :create
  before_action :find_user, only: :create

  # TODO: Security issue?
  protect_from_forgery with: :null_session

  respond_to :json

  # Returns a 200 if access is granted
  def show
    render :nothing => true
  end

  # Generate an SSO:Session
  def create
    @session  = Sso::Session.generate(@user, doorkeeper_token, params )
    respond_with @session, :location => sso.sessions_url
  end

  protected

  def find_user
    @user = User.find(doorkeeper_token.resource_owner_id)
  end

end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
doorkeeper_sso-0.0.4	app/controllers/sso/sessions_controller.rb