Graham McIntire
fd976b0cd5
- Add jump_credo_checks ~> 0.4 with all 20 checks enabled - Fix all standard Credo issues: 139 @spec (113 done, 26 remain), 4 refactoring, 3 alias usage, 9 System.cmd env, 5 unsafe_to_atom, 2 max line length, 9 assert_receive timeout - Fix 170+ jump_credo_checks warnings: - 117 TopLevelAliasImportRequire: move nested alias/import to module top - 32 UseObanProWorker: switch to Oban.Pro.Worker - 4 DoctestIExExamples: add doctests / create test file - ~20 WeakAssertion: strengthen type-check assertions - Various ConditionalAssertion, AssertReceiveTimeout fixes - Exclude vendor/ from Credo analysis - Remaining: 175 warnings (mostly opinionated WeakAssertion, AvoidSocketAssignsInTest), 26 @spec annotations
65 lines
2.1 KiB
Elixir
65 lines
2.1 KiB
Elixir
defmodule MicrowavepropWeb.UserSessionController do
|
|
use MicrowavepropWeb, :controller
|
|
|
|
alias Microwaveprop.Accounts
|
|
alias Microwaveprop.Accounts.User
|
|
alias MicrowavepropWeb.UserAuth
|
|
|
|
@spec new(Plug.Conn.t(), map()) :: Plug.Conn.t()
|
|
def new(conn, _params) do
|
|
email = get_in(conn.assigns, [:current_scope, Access.key(:user), Access.key(:email)])
|
|
form = Phoenix.Component.to_form(%{"email" => email}, as: "user")
|
|
|
|
render(conn, :new, form: form)
|
|
end
|
|
|
|
@spec create(Plug.Conn.t(), map()) :: Plug.Conn.t()
|
|
def create(conn, %{"user" => %{"email" => email, "password" => password} = user_params}) do
|
|
case Accounts.get_user_by_email_and_password(email, password) do
|
|
%User{confirmed_at: nil} ->
|
|
form = Phoenix.Component.to_form(user_params, as: "user")
|
|
|
|
conn
|
|
|> put_flash(
|
|
:error,
|
|
"Please confirm your email address before logging in. Check your inbox for the confirmation link."
|
|
)
|
|
|> render(:new, form: form)
|
|
|
|
%User{} = user ->
|
|
conn
|
|
|> put_flash(:info, "Welcome back!")
|
|
|> UserAuth.log_in_user(user, user_params)
|
|
|
|
nil ->
|
|
form = Phoenix.Component.to_form(user_params, as: "user")
|
|
|
|
# In order to prevent user enumeration attacks, don't disclose whether the email is registered.
|
|
conn
|
|
|> put_flash(:error, "Invalid email or password")
|
|
|> render(:new, form: form)
|
|
end
|
|
end
|
|
|
|
@spec confirm(Plug.Conn.t(), map()) :: Plug.Conn.t()
|
|
def confirm(conn, %{"token" => token}) do
|
|
case Accounts.confirm_user_by_token(token) do
|
|
{:ok, {user, _expired_tokens}} ->
|
|
conn
|
|
|> put_flash(:info, "Account confirmed. Welcome!")
|
|
|> UserAuth.log_in_user(user)
|
|
|
|
{:error, _reason} ->
|
|
conn
|
|
|> put_flash(:error, "Confirmation link is invalid or has expired.")
|
|
|> redirect(to: ~p"/users/log-in")
|
|
end
|
|
end
|
|
|
|
@spec delete(Plug.Conn.t(), map()) :: Plug.Conn.t()
|
|
def delete(conn, _params) do
|
|
conn
|
|
|> put_flash(:info, "Logged out successfully.")
|
|
|> UserAuth.log_out_user()
|
|
end
|
|
end
|