Files
old-ribica/front-api/controllers/user.rb

64 lines
1.5 KiB
Ruby

helpers do
def logged_in_user_id
auth = cookies['ribica_auth']
auth ||= -1
return auth.to_i
end
def anonymous_id
auid = cookies[:anonymous_user_id]
if auid.nil?
auid = AnonymousUser.uid
response.set_cookie('anonymous_user_id', :path=> '/', :httponly => true, :value=>auid, :expires=> Time.now + 100.year)
end
return auid
end
end
post '/user/logout' do
response.delete_cookie("ribica_auth", :path => "/")
end
post '/user/login' do
request.body.rewind
login_details = JSON.parse(request.body.read)
email = login_details['email']
password = login_details['password']
res = User.find_by(email: email).try(:authenticate, password) # => false
if res
#TODO : encrypt this cookie
response.set_cookie('ribica_auth', :path=> '/', :httponly => true, :value=>res.id, :expires=>Time.now+100.year)
res.to_json(except: 'password_digest')
else
status 401
{:error => "email ili lozinka neispravni!"}.to_json
end
end
get '/user' do
auth = cookies['ribica_auth']
if not auth.nil?
return User.find_by(id: auth).to_json(except: 'password_digest')
end
end
post '/user' do
request.body.rewind
json = request.body.read
user = User.new()
user.from_json(json, false)
if user.save
response.set_cookie('ribica_auth', :path=> '/', :httponly => true, :value=>user.id, :expires=>Time.now+100.year)
user.to_json(except: 'password_digest')
else
status 400
user.errors.to_json
end
end