module Spree::Core::ControllerHelpers::Auth
Public Instance Methods
current_ability()
click to toggle source
Needs to be overriden so that we use Spree's Ability rather than anyone else's.
# File lib/spree/core/controller_helpers/auth.rb, line 18 def current_ability @current_ability ||= Spree::Dependencies.ability_class.constantize.new(try_spree_current_user) end
current_oauth_token()
click to toggle source
# File lib/spree/core/controller_helpers/auth.rb, line 36 def current_oauth_token user = try_spree_current_user return unless user @current_oauth_token ||= Doorkeeper::AccessToken.active_for(user).last || Doorkeeper::AccessToken.create!(resource_owner_id: user.id) end
redirect_back_or_default(default)
click to toggle source
# File lib/spree/core/controller_helpers/auth.rb, line 22 def redirect_back_or_default(default) redirect_to(session['spree_user_return_to'] || request.env['HTTP_REFERER'] || default) session['spree_user_return_to'] = nil end
set_token()
click to toggle source
# File lib/spree/core/controller_helpers/auth.rb, line 27 def set_token cookies.permanent.signed[:token] ||= cookies.signed[:guest_token] cookies.permanent.signed[:token] ||= { value: generate_token, httponly: true } cookies.permanent.signed[:guest_token] ||= cookies.permanent.signed[:token] end
store_location()
click to toggle source
# File lib/spree/core/controller_helpers/auth.rb, line 43 def store_location # disallow return to login, logout, signup pages authentication_routes = [:spree_signup_path, :spree_login_path, :spree_logout_path] disallowed_urls = [] authentication_routes.each do |route| disallowed_urls << send(route) if respond_to?(route) end disallowed_urls.map! { |url| url[/\/\w+$/] } unless disallowed_urls.include?(request.fullpath) session['spree_user_return_to'] = request.fullpath.gsub('//', '/') end end
try_spree_current_user()
click to toggle source
proxy method to possible spree_current_user method Authentication extensions (such as spree_auth_devise) are meant to provide spree_current_user
# File lib/spree/core/controller_helpers/auth.rb, line 59 def try_spree_current_user # This one will be defined by apps looking to hook into Spree # As per authentication_helpers.rb if respond_to?(:spree_current_user) spree_current_user # This one will be defined by Devise elsif respond_to?(:current_spree_user) current_spree_user end end