Log in by email without Persona
Marcin Kulik
10 years ago
parent
53c2598c48
commit
0cd4559f5a
@ -0,0 +1,27 @@
|
||||
class LoginsController < ApplicationController
|
||||
|
||||
def new; end
|
||||
|
||||
def create
|
||||
email = params[:email].strip
|
||||
|
||||
if login_service.login(email)
|
||||
redirect_to sent_login_path, flash: { email_recipient: email }
|
||||
else
|
||||
@invalid_email = true
|
||||
render :new
|
||||
end
|
||||
end
|
||||
|
||||
def sent
|
||||
@email_recipient = flash[:email_recipient]
|
||||
redirect_to new_login_path unless @email_recipient
|
||||
end
|
||||
|
||||
private
|
||||
|
||||
def login_service
|
||||
EmailLoginService.new
|
||||
end
|
||||
|
||||
end
|
||||
@ -1,36 +1,33 @@
|
||||
class SessionsController < ApplicationController
|
||||
|
||||
def new; end
|
||||
|
||||
def create
|
||||
user = find_user
|
||||
user = login_service.validate(params[:token].to_s.strip)
|
||||
|
||||
if user
|
||||
self.current_user = user
|
||||
redirect_back_or_to root_url, :notice => "Welcome back!"
|
||||
redirect_back_or_to profile_path(user), notice: login_notice(user)
|
||||
else
|
||||
store[:new_user_email] = omniauth_credentials.email
|
||||
redirect_to new_user_path
|
||||
render :error
|
||||
end
|
||||
end
|
||||
|
||||
def destroy
|
||||
self.current_user = nil
|
||||
redirect_to root_path, :notice => "See you later!"
|
||||
end
|
||||
|
||||
def failure
|
||||
redirect_to root_path, :alert => "Authentication failed. Maybe try again?"
|
||||
redirect_to root_path, notice: "See you later!"
|
||||
end
|
||||
|
||||
private
|
||||
|
||||
def store
|
||||
session
|
||||
def login_service
|
||||
EmailLoginService.new
|
||||
end
|
||||
|
||||
def find_user
|
||||
User.for_email(omniauth_credentials.email)
|
||||
def login_notice(user)
|
||||
if user.first_login?
|
||||
"Welcome to Asciinema!"
|
||||
else
|
||||
"Welcome back!"
|
||||
end
|
||||
end
|
||||
|
||||
end
|
||||
|
||||
@ -0,0 +1,14 @@
|
||||
class Notifications < ActionMailer::Base
|
||||
default from: CFG.from_email
|
||||
|
||||
def self.delay_login_request(user_id, token)
|
||||
delay.login_request(user_id, token)
|
||||
end
|
||||
|
||||
def login_request(user_id, token)
|
||||
user = User.find(user_id)
|
||||
@login_url = login_token_url(token)
|
||||
|
||||
mail to: user.email
|
||||
end
|
||||
end
|
||||
@ -0,0 +1,21 @@
|
||||
class EmailLoginService
|
||||
|
||||
def login(email)
|
||||
user = User.for_email!(email)
|
||||
expiring_token = ExpiringToken.create_for_user(user)
|
||||
Notifications.delay_login_request(expiring_token.user_id, expiring_token.token)
|
||||
true
|
||||
rescue User::InvalidEmailError
|
||||
false
|
||||
end
|
||||
|
||||
def validate(token)
|
||||
expiring_token = ExpiringToken.active_for_token(token)
|
||||
|
||||
if expiring_token
|
||||
expiring_token.use!
|
||||
expiring_token.user
|
||||
end
|
||||
end
|
||||
|
||||
end
|
||||
@ -0,0 +1,17 @@
|
||||
.container
|
||||
.row
|
||||
.col-md-12
|
||||
h1 Log in
|
||||
|
||||
br
|
||||
|
||||
p Log in to Asciinema using your email address:
|
||||
|
||||
= form_tag login_path, class: "form-inline login-form" do
|
||||
.form-group
|
||||
input.form-control.email name="email" type="email" placeholder="Enter email"
|
||||
button.btn.btn-primary type="submit" Log in
|
||||
|
||||
- if @invalid_email
|
||||
br
|
||||
p.text-danger This email address doesn't seem to be correct.
|
||||
@ -0,0 +1,14 @@
|
||||
.container
|
||||
.row
|
||||
.col-md-12
|
||||
h1 You're almost in!
|
||||
|
||||
br
|
||||
|
||||
p
|
||||
| We sent a login link to
|
||||
strong = @email_recipient
|
||||
' . Please click on the link to login to your account.
|
||||
' The link is valid for next 15 minutes.
|
||||
|
||||
p If it doesn't arrive, check your spam folder, or enter your email again to send another login link.
|
||||
@ -0,0 +1,7 @@
|
||||
Hello,
|
||||
|
||||
Click the following link to log in to asciinema.org:
|
||||
|
||||
<%= @login_url %>
|
||||
|
||||
If you did not initiate this request, just ignore this email. The request will expire shortly.
|
||||
@ -0,0 +1,15 @@
|
||||
.container
|
||||
.row
|
||||
.col-md-12
|
||||
h1 Invalid login link
|
||||
|
||||
br
|
||||
|
||||
p Your login link is either invalid or has expired.
|
||||
|
||||
p
|
||||
' Login links are valid for 15 minutes. If you think this may be the case then
|
||||
a href=new_login_path request a new login link
|
||||
| .
|
||||
|
||||
p If you're copy-pasting the link check if the link hasn't been corrupted by your email client's message formatting.
|
||||
@ -1,8 +0,0 @@
|
||||
.container
|
||||
.row
|
||||
.col-md-12
|
||||
h1 Sign in
|
||||
|
||||
p Sign in using your email address by clicking on the button below:
|
||||
|
||||
= link_to image_tag('email_sign_in_black.png', :title => "Sign in with your email"), '#', :id => 'persona-button'
|
||||
@ -0,0 +1,65 @@
|
||||
require 'rails_helper'
|
||||
|
||||
describe LoginsController do
|
||||
|
||||
describe "#new" do
|
||||
subject { get :new }
|
||||
|
||||
it "renders 'new' template" do
|
||||
should render_template('new')
|
||||
end
|
||||
end
|
||||
|
||||
describe "#create" do
|
||||
subject { post :create, email: "foo@example.com" }
|
||||
|
||||
let(:login_service) { double(:login_service) }
|
||||
|
||||
before do
|
||||
allow(controller).to receive(:login_service) { login_service }
|
||||
allow(login_service).to receive(:login).with("foo@example.com") { login_success }
|
||||
end
|
||||
|
||||
context "when login succeeds" do
|
||||
let(:login_success) { true }
|
||||
|
||||
it "sets email_recipient in flash" do
|
||||
subject
|
||||
expect(flash[:email_recipient]).to eq("foo@example.com")
|
||||
end
|
||||
|
||||
it "redirects to 'sent' page" do
|
||||
should redirect_to(sent_login_path)
|
||||
end
|
||||
end
|
||||
|
||||
context "when login fails" do
|
||||
let(:login_success) { false }
|
||||
|
||||
it "renders 'new' template" do
|
||||
should render_template('new')
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe "#sent" do
|
||||
subject { get :sent, {}, {}, { email_recipient: email_recipient } }
|
||||
|
||||
context "when email_recipient is set in flash" do
|
||||
let(:email_recipient) { "foo@example.com" }
|
||||
|
||||
it "renders 'sent' template" do
|
||||
should render_template('sent')
|
||||
end
|
||||
end
|
||||
|
||||
context "when email_recipient is not set in flash" do
|
||||
let(:email_recipient) { nil }
|
||||
|
||||
it "redirects to login page" do
|
||||
should redirect_to(new_login_path)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
end
|
||||
@ -0,0 +1,3 @@
|
||||
Notifications#login_request
|
||||
|
||||
Hi, find me in app/views/notifications/login_request
|
||||
@ -0,0 +1,20 @@
|
||||
require "rails_helper"
|
||||
|
||||
RSpec.describe Notifications, :type => :mailer do
|
||||
describe "login_request" do
|
||||
let(:mail) { Notifications.login_request(user.id, "the-to-ken") }
|
||||
let(:user) { create(:user, email: "foo@example.com") }
|
||||
|
||||
it "renders the headers" do
|
||||
expect(mail.subject).to eq("Login request")
|
||||
expect(mail.to).to eq(["foo@example.com"])
|
||||
expect(mail.from).to eq(["hello@asciinema.org"])
|
||||
end
|
||||
|
||||
it "renders the body" do
|
||||
expect(mail.body.encoded).to match("Click")
|
||||
expect(mail.body.encoded).to match(login_token_path("the-to-ken"))
|
||||
end
|
||||
end
|
||||
|
||||
end
|
||||
@ -0,0 +1,99 @@
|
||||
require 'rails_helper'
|
||||
|
||||
describe EmailLoginService do
|
||||
|
||||
let(:creator) { described_class.new }
|
||||
|
||||
describe "#login" do
|
||||
subject { creator.login(email) }
|
||||
|
||||
let(:email) { "me@example.com" }
|
||||
|
||||
context "when given email is blank" do
|
||||
let(:email) { nil }
|
||||
|
||||
it "returns false" do
|
||||
expect(subject).to be(false)
|
||||
end
|
||||
end
|
||||
|
||||
context "when given email is invalid" do
|
||||
let(:email) { "oops" }
|
||||
|
||||
it "returns false" do
|
||||
expect(subject).to be(false)
|
||||
end
|
||||
end
|
||||
|
||||
context "when there's no user with given email" do
|
||||
it "creates a user with given email" do
|
||||
expect { subject }.to change(User, :count).by(1)
|
||||
expect(User.last.email).to eq("me@example.com")
|
||||
end
|
||||
|
||||
it "creates an expiring token for new user" do
|
||||
expect { subject }.to change(ExpiringToken, :count).by(1)
|
||||
expect(ExpiringToken.last.user).to eq(User.last)
|
||||
end
|
||||
|
||||
it "sends login email" do
|
||||
expect(Notifications).to receive(:delay_login_request)
|
||||
subject
|
||||
end
|
||||
|
||||
it "returns true" do
|
||||
expect(subject).to be(true)
|
||||
end
|
||||
end
|
||||
|
||||
context "when there's a user with given email" do
|
||||
let!(:user) { create(:user, email: "me@example.com") }
|
||||
|
||||
it "creates an expiring token this user" do
|
||||
expect { subject }.to change(ExpiringToken, :count).by(1)
|
||||
expect(ExpiringToken.last.user).to eq(user)
|
||||
end
|
||||
|
||||
it "sends login email" do
|
||||
expect(Notifications).to receive(:delay_login_request)
|
||||
subject
|
||||
end
|
||||
|
||||
it "returns true" do
|
||||
expect(subject).to be(true)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe "#validate" do
|
||||
subject { creator.validate(token) }
|
||||
|
||||
let(:token) { "the-to-ken" }
|
||||
|
||||
context "when given token is valid" do
|
||||
let!(:expiring_token) { create(:expiring_token, user: user, token: token) }
|
||||
let(:user) { create(:user) }
|
||||
|
||||
it "marks token as used" do
|
||||
now = Time.now
|
||||
|
||||
Timecop.freeze(now) do
|
||||
subject
|
||||
end
|
||||
|
||||
expect(expiring_token.reload.used_at.to_i).to eq(now.to_i)
|
||||
end
|
||||
|
||||
it "returns user associated with the token" do
|
||||
expect(subject).to eq(user)
|
||||
end
|
||||
end
|
||||
|
||||
context "when given token is invalid" do
|
||||
it "returns nil" do
|
||||
expect(subject).to be(nil)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
end
|
||||
Loading…
Reference in New Issue