email_address.rb
107 lines
| 3.6 KiB
| text/x-ruby
|
RubyLexer
Jean-Philippe Lang
|
r13504 | # Redmine - project management software | ||
|
Jean-Philippe Lang
|
r14856 | # Copyright (C) 2006-2016 Jean-Philippe Lang | ||
|
Jean-Philippe Lang
|
r13504 | # | ||
| # This program is free software; you can redistribute it and/or | ||||
| # modify it under the terms of the GNU General Public License | ||||
| # as published by the Free Software Foundation; either version 2 | ||||
| # of the License, or (at your option) any later version. | ||||
| # | ||||
| # This program is distributed in the hope that it will be useful, | ||||
| # but WITHOUT ANY WARRANTY; without even the implied warranty of | ||||
| # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||||
| # GNU General Public License for more details. | ||||
| # | ||||
| # You should have received a copy of the GNU General Public License | ||||
| # along with this program; if not, write to the Free Software | ||||
| # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. | ||||
| class EmailAddress < ActiveRecord::Base | ||||
| belongs_to :user | ||||
| attr_protected :id | ||||
|
Jean-Philippe Lang
|
r14763 | after_create :deliver_security_notification_create | ||
| after_update :destroy_tokens, :deliver_security_notification_update | ||||
| after_destroy :destroy_tokens, :deliver_security_notification_destroy | ||||
|
Jean-Philippe Lang
|
r13504 | |||
| validates_presence_of :address | ||||
| validates_format_of :address, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i, :allow_blank => true | ||||
| validates_length_of :address, :maximum => User::MAIL_LENGTH_LIMIT, :allow_nil => true | ||||
| validates_uniqueness_of :address, :case_sensitive => false, | ||||
| :if => Proc.new {|email| email.address_changed? && email.address.present?} | ||||
| def address=(arg) | ||||
| write_attribute(:address, arg.to_s.strip) | ||||
| end | ||||
| def destroy | ||||
| if is_default? | ||||
| false | ||||
| else | ||||
| super | ||||
| end | ||||
| end | ||||
| private | ||||
|
Jean-Philippe Lang
|
r14763 | # send a security notification to user that a new email address was added | ||
| def deliver_security_notification_create | ||||
| # only deliver if this isn't the only address. | ||||
| # in that case, the user is just being created and | ||||
| # should not receive this email. | ||||
| if user.mails != [address] | ||||
| deliver_security_notification(user, | ||||
| message: :mail_body_security_notification_add, | ||||
| field: :field_mail, | ||||
| value: address | ||||
| ) | ||||
| end | ||||
| end | ||||
| # send a security notification to user that an email has been changed (notified/not notified) | ||||
| def deliver_security_notification_update | ||||
| if address_changed? | ||||
| recipients = [user, address_was] | ||||
| options = { | ||||
| message: :mail_body_security_notification_change_to, | ||||
| field: :field_mail, | ||||
| value: address | ||||
| } | ||||
| elsif notify_changed? | ||||
| recipients = [user, address] | ||||
| options = { | ||||
| message: notify_was ? :mail_body_security_notification_notify_disabled : :mail_body_security_notification_notify_enabled, | ||||
| value: address | ||||
| } | ||||
| end | ||||
| deliver_security_notification(recipients, options) | ||||
| end | ||||
| # send a security notification to user that an email address was deleted | ||||
| def deliver_security_notification_destroy | ||||
| deliver_security_notification([user, address], | ||||
| message: :mail_body_security_notification_remove, | ||||
| field: :field_mail, | ||||
| value: address | ||||
| ) | ||||
| end | ||||
| # generic method to send security notifications for email addresses | ||||
| def deliver_security_notification(recipients, options={}) | ||||
| Mailer.security_notification(recipients, | ||||
| options.merge( | ||||
| title: :label_my_account, | ||||
| url: {controller: 'my', action: 'account'} | ||||
| ) | ||||
| ).deliver | ||||
| end | ||||
|
Jean-Philippe Lang
|
r13504 | # Delete all outstanding password reset tokens on email change. | ||
| # This helps to keep the account secure in case the associated email account | ||||
| # was compromised. | ||||
| def destroy_tokens | ||||
| if address_changed? || destroyed? | ||||
| tokens = ['recovery'] | ||||
| Token.where(:user_id => user_id, :action => tokens).delete_all | ||||
| end | ||||
| end | ||||
| end | ||||