Contents

# frozen_string_literal: true

class PasswordResetsController < ApplicationController
  skip_before_action :authorization_required

  layout "sessions"

  # Renders form for user to request a password reset
  def new
    # new.html.erb
  end

  # Send a password update link to users with a verified email
  def create
    if email_valid?
      send_update_password_email if user

      # Always display notice to prevent leaking user emails
      redirect_to new_session_path, notice: t(".notice", email:)
    else
      flash.now.alert = t(".alert")
      render :new, status: :unprocessable_entity
    end
  end

  private

  def email
    params.dig(:user, :email)
  end

  def send_update_password_email
    MinimalistAuthenticationMailer.with(user:).update_password.deliver_now
  end

  def user
    @user ||= MinimalistAuthentication.user_model.find_by_verified_email(email:)
  end

  def email_valid?
    URI::MailTo::EMAIL_REGEXP.match?(email)
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
minimalist_authentication-3.2.2	app/controllers/password_resets_controller.rb
minimalist_authentication-3.2.1	app/controllers/password_resets_controller.rb
minimalist_authentication-3.2.0	app/controllers/password_resets_controller.rb