account_controller.rb
283 lines
| 9.6 KiB
| text/x-ruby
|
RubyLexer
Jean-Philippe Lang
|
r2064 | # Redmine - project management software | ||
| # Copyright (C) 2006-2008 Jean-Philippe Lang | ||||
|
Jean-Philippe Lang
|
r330 | # | ||
| # This program is free software; you can redistribute it and/or | ||||
| # modify it under the terms of the GNU General Public License | ||||
| # as published by the Free Software Foundation; either version 2 | ||||
| # of the License, or (at your option) any later version. | ||||
| # | ||||
| # This program is distributed in the hope that it will be useful, | ||||
| # but WITHOUT ANY WARRANTY; without even the implied warranty of | ||||
| # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||||
| # GNU General Public License for more details. | ||||
| # | ||||
| # You should have received a copy of the GNU General Public License | ||||
| # along with this program; if not, write to the Free Software | ||||
| # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. | ||||
| class AccountController < ApplicationController | ||||
| helper :custom_fields | ||||
| include CustomFieldsHelper | ||||
| # prevents login action to be filtered by check_if_login_required application scope filter | ||||
|
Jean-Philippe Lang
|
r902 | skip_before_filter :check_if_login_required, :only => [:login, :lost_password, :register, :activate] | ||
|
Jean-Philippe Lang
|
r330 | |||
| # Show user's account | ||||
| def show | ||||
|
Jean-Philippe Lang
|
r2077 | @user = User.active.find(params[:id]) | ||
|
Jean-Philippe Lang
|
r1730 | @custom_values = @user.custom_values | ||
|
Jean-Philippe Lang
|
r564 | |||
| # show only public projects and private projects that the logged in user is also a member of | ||||
| @memberships = @user.memberships.select do |membership| | ||||
|
Jean-Philippe Lang
|
r1023 | membership.project.is_public? || (User.current.member_of?(membership.project)) | ||
|
Jean-Philippe Lang
|
r564 | end | ||
|
Jean-Philippe Lang
|
r2064 | |||
| events = Redmine::Activity::Fetcher.new(User.current, :author => @user).events(nil, nil, :limit => 10) | ||||
| @events_by_day = events.group_by(&:event_date) | ||||
|
Jean-Philippe Lang
|
r2872 | if @user != User.current && !User.current.admin? && @memberships.empty? && events.empty? | ||
| render_404 and return | ||||
| end | ||||
|
Jean-Philippe Lang
|
r330 | rescue ActiveRecord::RecordNotFound | ||
| render_404 | ||||
| end | ||||
| # Login request and validation | ||||
| def login | ||||
| if request.get? | ||||
| # Logout user | ||||
|
Jean-Philippe Lang
|
r663 | self.logged_user = nil | ||
|
Jean-Philippe Lang
|
r330 | else | ||
| # Authenticate user | ||||
|
Jean-Philippe Lang
|
r2397 | if Setting.openid? && using_open_id? | ||
Eric Davis
|
r2381 | open_id_authenticate(params[:openid_url]) | ||
|
Eric Davis
|
r2388 | else | ||
| password_authentication | ||||
|
Jean-Philippe Lang
|
r330 | end | ||
| end | ||||
| end | ||||
| # Log out current user and redirect to welcome page | ||||
| def logout | ||||
|
Jean-Philippe Lang
|
r511 | cookies.delete :autologin | ||
|
Jean-Philippe Lang
|
r663 | Token.delete_all(["user_id = ? AND action = ?", User.current.id, 'autologin']) if User.current.logged? | ||
| self.logged_user = nil | ||||
|
Jean-Philippe Lang
|
r749 | redirect_to home_url | ||
|
Jean-Philippe Lang
|
r330 | end | ||
| # Enable user to choose a new password | ||||
| def lost_password | ||||
|
Jean-Philippe Lang
|
r749 | redirect_to(home_url) && return unless Setting.lost_password? | ||
|
Jean-Philippe Lang
|
r330 | if params[:token] | ||
| @token = Token.find_by_action_and_value("recovery", params[:token]) | ||||
|
Jean-Philippe Lang
|
r749 | redirect_to(home_url) && return unless @token and !@token.expired? | ||
|
Jean-Philippe Lang
|
r330 | @user = @token.user | ||
| if request.post? | ||||
| @user.password, @user.password_confirmation = params[:new_password], params[:new_password_confirmation] | ||||
| if @user.save | ||||
| @token.destroy | ||||
| flash[:notice] = l(:notice_account_password_updated) | ||||
| redirect_to :action => 'login' | ||||
| return | ||||
| end | ||||
| end | ||||
| render :template => "account/password_recovery" | ||||
| return | ||||
| else | ||||
| if request.post? | ||||
| user = User.find_by_mail(params[:mail]) | ||||
| # user not found in db | ||||
|
Jean-Philippe Lang
|
r597 | flash.now[:error] = l(:notice_account_unknown_email) and return unless user | ||
|
Jean-Philippe Lang
|
r330 | # user uses an external authentification | ||
|
Jean-Philippe Lang
|
r597 | flash.now[:error] = l(:notice_can_t_change_password) and return if user.auth_source_id | ||
|
Jean-Philippe Lang
|
r330 | # create a new token for password recovery | ||
| token = Token.new(:user => user, :action => "recovery") | ||||
| if token.save | ||||
| Mailer.deliver_lost_password(token) | ||||
| flash[:notice] = l(:notice_account_lost_email_sent) | ||||
| redirect_to :action => 'login' | ||||
| return | ||||
| end | ||||
| end | ||||
| end | ||||
| end | ||||
| # User self-registration | ||||
| def register | ||||
|
Jean-Philippe Lang
|
r1661 | redirect_to(home_url) && return unless Setting.self_registration? || session[:auth_source_registration] | ||
|
Jean-Philippe Lang
|
r902 | if request.get? | ||
|
Jean-Philippe Lang
|
r1661 | session[:auth_source_registration] = nil | ||
|
Jean-Philippe Lang
|
r902 | @user = User.new(:language => Setting.default_language) | ||
|
Jean-Philippe Lang
|
r330 | else | ||
|
Jean-Philippe Lang
|
r902 | @user = User.new(params[:user]) | ||
| @user.admin = false | ||||
| @user.status = User::STATUS_REGISTERED | ||||
|
Jean-Philippe Lang
|
r1661 | if session[:auth_source_registration] | ||
|
Jean-Philippe Lang
|
r902 | @user.status = User::STATUS_ACTIVE | ||
|
Jean-Philippe Lang
|
r1661 | @user.login = session[:auth_source_registration][:login] | ||
| @user.auth_source_id = session[:auth_source_registration][:auth_source_id] | ||||
|
Jean-Philippe Lang
|
r902 | if @user.save | ||
|
Jean-Philippe Lang
|
r1661 | session[:auth_source_registration] = nil | ||
|
Jean-Philippe Lang
|
r1507 | self.logged_user = @user | ||
|
Jean-Philippe Lang
|
r902 | flash[:notice] = l(:notice_account_activated) | ||
|
Jean-Philippe Lang
|
r1507 | redirect_to :controller => 'my', :action => 'account' | ||
|
Jean-Philippe Lang
|
r902 | end | ||
| else | ||||
|
Jean-Philippe Lang
|
r1661 | @user.login = params[:user][:login] | ||
| @user.password, @user.password_confirmation = params[:password], params[:password_confirmation] | ||||
|
Eric Davis
|
r2386 | |||
|
Jean-Philippe Lang
|
r1661 | case Setting.self_registration | ||
| when '1' | ||||
|
Eric Davis
|
r2386 | register_by_email_activation(@user) | ||
|
Jean-Philippe Lang
|
r1661 | when '3' | ||
|
Eric Davis
|
r2386 | register_automatically(@user) | ||
|
Jean-Philippe Lang
|
r1661 | else | ||
|
Eric Davis
|
r2386 | register_manually_by_administrator(@user) | ||
|
Jean-Philippe Lang
|
r330 | end | ||
| end | ||||
| end | ||||
| end | ||||
|
Jean-Philippe Lang
|
r663 | |||
|
Jean-Philippe Lang
|
r902 | # Token based account activation | ||
| def activate | ||||
| redirect_to(home_url) && return unless Setting.self_registration? && params[:token] | ||||
| token = Token.find_by_action_and_value('register', params[:token]) | ||||
| redirect_to(home_url) && return unless token and !token.expired? | ||||
| user = token.user | ||||
| redirect_to(home_url) && return unless user.status == User::STATUS_REGISTERED | ||||
| user.status = User::STATUS_ACTIVE | ||||
| if user.save | ||||
| token.destroy | ||||
| flash[:notice] = l(:notice_account_activated) | ||||
| end | ||||
| redirect_to :action => 'login' | ||||
| end | ||||
|
Jean-Philippe Lang
|
r2460 | private | ||
|
Eric Davis
|
r2381 | def password_authentication | ||
| user = User.try_to_login(params[:username], params[:password]) | ||||
| if user.nil? | ||||
| # Invalid credentials | ||||
| flash.now[:error] = l(:notice_account_invalid_creditentials) | ||||
| elsif user.new_record? | ||||
| # Onthefly creation failed, display the registration form to fill/fix attributes | ||||
| @user = user | ||||
| session[:auth_source_registration] = {:login => user.login, :auth_source_id => user.auth_source_id } | ||||
| render :action => 'register' | ||||
| else | ||||
| # Valid user | ||||
| successful_authentication(user) | ||||
| end | ||||
| end | ||||
| def open_id_authenticate(openid_url) | ||||
| authenticate_with_open_id(openid_url, :required => [:nickname, :fullname, :email], :return_to => signin_url) do |result, identity_url, registration| | ||||
| if result.successful? | ||||
| user = User.find_or_initialize_by_identity_url(identity_url) | ||||
| if user.new_record? | ||||
|
Eric Davis
|
r2387 | # Self-registration off | ||
| redirect_to(home_url) && return unless Setting.self_registration? | ||||
|
Eric Davis
|
r2381 | # Create on the fly | ||
|
Eric Davis
|
r2384 | user.login = registration['nickname'] unless registration['nickname'].nil? | ||
| user.mail = registration['email'] unless registration['email'].nil? | ||||
| user.firstname, user.lastname = registration['fullname'].split(' ') unless registration['fullname'].nil? | ||||
|
Eric Davis
|
r2382 | user.random_password | ||
|
Eric Davis
|
r2385 | user.status = User::STATUS_REGISTERED | ||
| case Setting.self_registration | ||||
| when '1' | ||||
|
Eric Davis
|
r2386 | register_by_email_activation(user) do | ||
|
Eric Davis
|
r2421 | onthefly_creation_failed(user) | ||
|
Eric Davis
|
r2385 | end | ||
| when '3' | ||||
|
Eric Davis
|
r2386 | register_automatically(user) do | ||
|
Eric Davis
|
r2421 | onthefly_creation_failed(user) | ||
|
Eric Davis
|
r2385 | end | ||
|
Eric Davis
|
r2382 | else | ||
|
Eric Davis
|
r2386 | register_manually_by_administrator(user) do | ||
|
Eric Davis
|
r2421 | onthefly_creation_failed(user) | ||
|
Eric Davis
|
r2385 | end | ||
| end | ||||
|
Eric Davis
|
r2381 | else | ||
|
Eric Davis
|
r2382 | # Existing record | ||
|
Eric Davis
|
r2420 | if user.active? | ||
| successful_authentication(user) | ||||
| else | ||||
| account_pending | ||||
| end | ||||
|
Eric Davis
|
r2381 | end | ||
| end | ||||
| end | ||||
| end | ||||
| def successful_authentication(user) | ||||
| # Valid user | ||||
| self.logged_user = user | ||||
| # generate a key and set cookie if autologin | ||||
| if params[:autologin] && Setting.autologin? | ||||
| token = Token.create(:user => user, :action => 'autologin') | ||||
| cookies[:autologin] = { :value => token.value, :expires => 1.year.from_now } | ||||
| end | ||||
|
Eric Davis
|
r2533 | call_hook(:controller_account_success_authentication_after, {:user => user }) | ||
|
Eric Davis
|
r2381 | redirect_back_or_default :controller => 'my', :action => 'page' | ||
| end | ||||
|
Eric Davis
|
r2385 | # Onthefly creation failed, display the registration form to fill/fix attributes | ||
| def onthefly_creation_failed(user, auth_source_options = { }) | ||||
| @user = user | ||||
| session[:auth_source_registration] = auth_source_options unless auth_source_options.empty? | ||||
| render :action => 'register' | ||||
| end | ||||
|
Eric Davis
|
r2386 | # Register a user for email activation. | ||
| # | ||||
| # Pass a block for behavior when a user fails to save | ||||
| def register_by_email_activation(user, &block) | ||||
| token = Token.new(:user => user, :action => "register") | ||||
| if user.save and token.save | ||||
| Mailer.deliver_register(token) | ||||
| flash[:notice] = l(:notice_account_register_done) | ||||
| redirect_to :action => 'login' | ||||
| else | ||||
| yield if block_given? | ||||
| end | ||||
| end | ||||
| # Automatically register a user | ||||
| # | ||||
| # Pass a block for behavior when a user fails to save | ||||
| def register_automatically(user, &block) | ||||
| # Automatic activation | ||||
| user.status = User::STATUS_ACTIVE | ||||
|
Jean-Philippe Lang
|
r2526 | user.last_login_on = Time.now | ||
|
Eric Davis
|
r2386 | if user.save | ||
| self.logged_user = user | ||||
| flash[:notice] = l(:notice_account_activated) | ||||
| redirect_to :controller => 'my', :action => 'account' | ||||
| else | ||||
| yield if block_given? | ||||
| end | ||||
| end | ||||
| # Manual activation by the administrator | ||||
| # | ||||
| # Pass a block for behavior when a user fails to save | ||||
| def register_manually_by_administrator(user, &block) | ||||
| if user.save | ||||
| # Sends an email to the administrators | ||||
| Mailer.deliver_account_activation_request(user) | ||||
|
Eric Davis
|
r2420 | account_pending | ||
|
Eric Davis
|
r2386 | else | ||
| yield if block_given? | ||||
| end | ||||
| end | ||||
|
Eric Davis
|
r2420 | |||
| def account_pending | ||||
| flash[:notice] = l(:notice_account_pending) | ||||
| redirect_to :action => 'login' | ||||
| end | ||||
|
Jean-Philippe Lang
|
r2 | end | ||