aboutsummaryrefslogtreecommitdiff
path: root/app/controllers
diff options
context:
space:
mode:
Diffstat (limited to 'app/controllers')
-rw-r--r--app/controllers/application_controller.rb12
-rw-r--r--app/controllers/welcome_controller.rb82
2 files changed, 94 insertions, 0 deletions
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 09705d1..c34b9f9 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,2 +1,14 @@
class ApplicationController < ActionController::Base
+ protect_from_forgery with: :null_session
+
+ require 'sso'
+
+ before_action :current_user
+
+ protected
+
+ def current_user
+ @current_user ||= User.find_by(external_id: session[:current_user]) if session[:current_user].present?
+ end
+ helper_method :current_user
end
diff --git a/app/controllers/welcome_controller.rb b/app/controllers/welcome_controller.rb
new file mode 100644
index 0000000..ae24138
--- /dev/null
+++ b/app/controllers/welcome_controller.rb
@@ -0,0 +1,82 @@
+class WelcomeController < ApplicationController
+ # GET /
+ def index
+ end
+
+ # GET /authenticate(/:token)
+ # Discourse SSO Authentication
+ def authenticate
+ # Ensure nobody tries silly things with our session
+ if params[:token].present? && !params[:token].match?(/[a-z0-9]{32}/)
+ raise(ArgumentError, "Token invalid")
+ end
+
+ # Try an ongoing SSO or create a new one
+ @sso = SSO::FromDiscourse.new(token: params[:token], nonce: session[params[:token]])
+ # Remove any current session
+ Rails.logger.info("Removing current session (#{session[:current_user]})")
+ session.destroy
+ @current_user = nil
+
+ if params[:token].nil? # Send to authenticate
+ # Record this token and nonce in the session
+ session[@sso.token] = @sso.nonce
+ # Send to authorization
+ redirect_to @sso.request_uri and return
+ end
+
+ # Validate authentication
+ begin
+ @sso.parse(params)
+ rescue ArgumentError => e
+ return 403, e.message
+ end
+
+ case @sso.status
+ when :unauthorized
+ Rails.logger.info("Authentication failed!")
+ return 403
+ when :ok
+ Rails.logger.info("Authentication succeeded!")
+ @current_user = User.find_by(external_id: @sso.user_info[:external_id]) ||
+ begin
+ Rails.logger.info('new user...')
+ u = User.create(
+ external_id: @sso.user_info[:external_id],
+ avatar_url: @sso.user_info[:avatar_url],
+ email: @sso.user_info[:email],
+ name: @sso.user_info[:name],
+ username: @sso.user_info[:username])
+ Rails.logger.info('created user %s' % u.inspect)
+ u
+ rescue Exception => e
+ raise
+ end
+ # Update user agents
+ # TODO: do it as a background job, it has nothing to do here.
+ @sso.user_info[:groups].split(',').each do |g|
+ a = Agent.find_by_name(g)
+ if a
+ # TODO: call Discourse and make :leader if group owner
+ # TODO: do not create the record if it exists
+ a.agencies.create(user: u, roles: 2) # make new user an editor
+ Rails.logger.info('User has Agent %s' % g)
+ end
+ end
+ session[:current_user] = @current_user[:external_id]
+ end
+
+ redirect_to '/my/dashboard'
+ end
+
+ # GET /dashboard
+ def dashboard
+ redirect_to '/authenticate' and return unless current_user.present?
+ end
+
+ # GET /logout
+ def logout
+ session.destroy
+ render :index
+ end
+end