* add pam support, without extra column * bugfixes for pam login * document options * fix code style * fix codestyle * fix tests * don't call remember_me without password * fix codestyle * improve checks for pam usage (should fix tests) * fix remember_me part 1 * add remember_token column because :rememberable requires either a password or this column. * migrate db for remember_token * move pam_authentication to the right place, fix logic bug in edit.html.haml * fix tests * fix pam authentication, improve username lookup, add comment * valid? is sometimes not honored, return nil instead trying to authenticate with pam * update devise_pam_authenticatable2 and adjust code. Fixes sideeffects observed in tests * update devise_pam_authenticatable gem, fixes for codeconventions, fix finding user * codeconvention fixes * code convention fixes * fix idention * update dependency, explicit conflict check * fix disabled password updates if in pam mode * fix check password if password is present, fix templates * block registration if account is maintained by pam * Revert "block registration if account is maintained by pam" This reverts commit 8e7a083d650240b6fac414926744b4b90b435f20. * fix identation error introduced by rebase * block usernames maintained by pam * document pam settings better * fix code style
		
			
				
	
	
		
			78 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			78 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
# frozen_string_literal: true
 | 
						|
 | 
						|
class Auth::RegistrationsController < Devise::RegistrationsController
 | 
						|
  layout :determine_layout
 | 
						|
 | 
						|
  before_action :check_enabled_registrations, only: [:new, :create]
 | 
						|
  before_action :configure_sign_up_params, only: [:create]
 | 
						|
  before_action :set_sessions, only: [:edit, :update]
 | 
						|
  before_action :set_instance_presenter, only: [:new, :create, :update]
 | 
						|
 | 
						|
  def destroy
 | 
						|
    not_found
 | 
						|
  end
 | 
						|
 | 
						|
  protected
 | 
						|
 | 
						|
  def update_resource(resource, params)
 | 
						|
    params[:password] = nil if Devise.pam_authentication && resource.encrypted_password.blank?
 | 
						|
    super
 | 
						|
  end
 | 
						|
 | 
						|
  def build_resource(hash = nil)
 | 
						|
    super(hash)
 | 
						|
 | 
						|
    resource.locale      = I18n.locale
 | 
						|
    resource.invite_code = params[:invite_code] if resource.invite_code.blank?
 | 
						|
 | 
						|
    resource.build_account if resource.account.nil?
 | 
						|
  end
 | 
						|
 | 
						|
  def configure_sign_up_params
 | 
						|
    devise_parameter_sanitizer.permit(:sign_up) do |u|
 | 
						|
      u.permit({ account_attributes: [:username] }, :email, :password, :password_confirmation, :invite_code)
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  def after_sign_up_path_for(_resource)
 | 
						|
    new_user_session_path
 | 
						|
  end
 | 
						|
 | 
						|
  def after_inactive_sign_up_path_for(_resource)
 | 
						|
    new_user_session_path
 | 
						|
  end
 | 
						|
 | 
						|
  def after_update_path_for(_resource)
 | 
						|
    edit_user_registration_path
 | 
						|
  end
 | 
						|
 | 
						|
  def check_enabled_registrations
 | 
						|
    redirect_to root_path if single_user_mode? || !allowed_registrations?
 | 
						|
  end
 | 
						|
 | 
						|
  def allowed_registrations?
 | 
						|
    Setting.open_registrations || (invite_code.present? && Invite.find_by(code: invite_code)&.valid_for_use?)
 | 
						|
  end
 | 
						|
 | 
						|
  def invite_code
 | 
						|
    if params[:user]
 | 
						|
      params[:user][:invite_code]
 | 
						|
    else
 | 
						|
      params[:invite_code]
 | 
						|
    end
 | 
						|
  end
 | 
						|
 | 
						|
  private
 | 
						|
 | 
						|
  def set_instance_presenter
 | 
						|
    @instance_presenter = InstancePresenter.new
 | 
						|
  end
 | 
						|
 | 
						|
  def determine_layout
 | 
						|
    %w(edit update).include?(action_name) ? 'admin' : 'auth'
 | 
						|
  end
 | 
						|
 | 
						|
  def set_sessions
 | 
						|
    @sessions = current_user.session_activations
 | 
						|
  end
 | 
						|
end
 |