When customizing CONSUL, one of the most common actions is adding a new
field to a form.
This requires modifying the permitted/allowed parameters. However, in
most cases, the method returning these parameters returned an instance
of `ActionController::Parameters`, so adding more parameters to it
wasn't easy.
So customizing the code required copying the method returning those
parameters and adding the new ones. For example:
```
def something_params
params.require(:something).permit(
:one_consul_attribute,
:another_consul_attribute,
:my_custom_attribute
)
end
```
This meant that, if the `something_params` method changed in CONSUL, the
customization of this method had to be updated as well.
So we're extracting the logic returning the parameters to a method which
returns an array. Now this code can be customized without copying the
original method:
```
alias_method :consul_allowed_params, :allowed_params
def allowed_params
consul_allowed_params + [:my_custom_attribute]
end
```
63 lines
1.5 KiB
Ruby
63 lines
1.5 KiB
Ruby
class Verification::LetterController < ApplicationController
|
|
before_action :authenticate_user!, except: [:edit, :update]
|
|
before_action :login_via_form, only: :update
|
|
|
|
before_action :verify_resident!, if: :signed_in?
|
|
before_action :verify_phone!, if: :signed_in?
|
|
before_action :verify_verified!, if: :signed_in?
|
|
before_action :verify_lock, if: :signed_in?
|
|
|
|
skip_authorization_check
|
|
|
|
def new
|
|
@letter = Verification::Letter.new(user: current_user)
|
|
end
|
|
|
|
def create
|
|
@letter = Verification::Letter.new(user: current_user)
|
|
@letter.save!
|
|
redirect_to letter_path
|
|
end
|
|
|
|
def show
|
|
end
|
|
|
|
def edit
|
|
@letter = Verification::Letter.new
|
|
end
|
|
|
|
def update
|
|
@letter = Verification::Letter.new(letter_params.merge(user: current_user, verify: true))
|
|
if @letter.valid?
|
|
current_user.update!(verified_at: Time.current)
|
|
redirect_to account_path, notice: t("verification.letter.update.flash.success")
|
|
else
|
|
Lock.increase_tries(@letter.user) if @letter.user
|
|
render :edit
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def letter_params
|
|
params.require(:verification_letter).permit(allowed_params)
|
|
end
|
|
|
|
def allowed_params
|
|
[:verification_code, :email, :password]
|
|
end
|
|
|
|
def verify_phone!
|
|
unless current_user.sms_verified?
|
|
redirect_to verified_user_path, alert: t("verification.letter.alert.unconfirmed_code")
|
|
end
|
|
end
|
|
|
|
def login_via_form
|
|
user = User.find_by email: letter_params[:email]
|
|
if user&.valid_password?(letter_params[:password])
|
|
sign_in(user)
|
|
end
|
|
end
|
|
end
|