70 lines
1.4 KiB
Ruby
70 lines
1.4 KiB
Ruby
class NotFound < StandardError; end
|
|
|
|
class ApplicationController < ActionController::Base
|
|
protect_from_forgery
|
|
rescue_from(ActiveRecord::RecordNotFound) { render 'exceptions/not_found' }
|
|
|
|
class Unauthorized < Exception; end
|
|
class Forbidden < Exception; end
|
|
|
|
rescue_from Unauthorized, :with => :unauthorized
|
|
rescue_from Forbidden, :with => :forbidden
|
|
|
|
helper_method :current_user
|
|
|
|
def current_user
|
|
@current_user ||= User.find_by_id(session[:user_id]) if session[:user_id]
|
|
end
|
|
|
|
def current_user=(user)
|
|
if user
|
|
@current_user = user
|
|
session[:user_id] = user.id
|
|
else
|
|
@current_user = nil
|
|
session[:user_id] = nil
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def ensure_authenticated!
|
|
raise Unauthorized unless current_user
|
|
end
|
|
|
|
def store_location
|
|
session[:return_to] = request.path
|
|
end
|
|
|
|
def get_stored_location
|
|
session.delete(:return_to)
|
|
end
|
|
|
|
def redirect_back_or_to(default, options = nil)
|
|
path = get_stored_location || default
|
|
|
|
if options
|
|
redirect_to path, options
|
|
else
|
|
redirect_to path
|
|
end
|
|
end
|
|
|
|
def forbidden
|
|
if request.xhr?
|
|
render :json => "Forbidden", :status => 403
|
|
else
|
|
redirect_to root_path, :alert => "This action is forbidden"
|
|
end
|
|
end
|
|
|
|
def unauthorized
|
|
if request.xhr?
|
|
render :json => "Unauthorized", :status => 401
|
|
else
|
|
store_location
|
|
redirect_to login_path, :notice => "Please login"
|
|
end
|
|
end
|
|
end
|