Files
nairobi/app/controllers/verification/letter_controller.rb
Javi Martín 11832cc07d Make it easier to customize allowed parameters
When customizing CONSUL, one of the most common actions is adding a new
field to a form.

This requires modifying the permitted/allowed parameters. However, in
most cases, the method returning these parameters returned an instance
of `ActionController::Parameters`, so adding more parameters to it
wasn't easy.

So customizing the code required copying the method returning those
parameters and adding the new ones. For example:

```
def something_params
  params.require(:something).permit(
    :one_consul_attribute,
    :another_consul_attribute,
    :my_custom_attribute
  )
end
```

This meant that, if the `something_params` method changed in CONSUL, the
customization of this method had to be updated as well.

So we're extracting the logic returning the parameters to a method which
returns an array. Now this code can be customized without copying the
original method:

```
alias_method :consul_allowed_params, :allowed_params

def allowed_params
  consul_allowed_params + [:my_custom_attribute]
end
```
2022-04-07 19:35:40 +02:00

63 lines
1.5 KiB
Ruby

class Verification::LetterController < ApplicationController
before_action :authenticate_user!, except: [:edit, :update]
before_action :login_via_form, only: :update
before_action :verify_resident!, if: :signed_in?
before_action :verify_phone!, if: :signed_in?
before_action :verify_verified!, if: :signed_in?
before_action :verify_lock, if: :signed_in?
skip_authorization_check
def new
@letter = Verification::Letter.new(user: current_user)
end
def create
@letter = Verification::Letter.new(user: current_user)
@letter.save!
redirect_to letter_path
end
def show
end
def edit
@letter = Verification::Letter.new
end
def update
@letter = Verification::Letter.new(letter_params.merge(user: current_user, verify: true))
if @letter.valid?
current_user.update!(verified_at: Time.current)
redirect_to account_path, notice: t("verification.letter.update.flash.success")
else
Lock.increase_tries(@letter.user) if @letter.user
render :edit
end
end
private
def letter_params
params.require(:verification_letter).permit(allowed_params)
end
def allowed_params
[:verification_code, :email, :password]
end
def verify_phone!
unless current_user.sms_verified?
redirect_to verified_user_path, alert: t("verification.letter.alert.unconfirmed_code")
end
end
def login_via_form
user = User.find_by email: letter_params[:email]
if user&.valid_password?(letter_params[:password])
sign_in(user)
end
end
end