46 lines
1.1 KiB
Ruby
46 lines
1.1 KiB
Ruby
|
|
post '/user/logout' do
|
|
response.delete_cookie("ribica_auth", :path => "/")
|
|
end
|
|
|
|
post '/user/login' do
|
|
request.body.rewind
|
|
login_details = JSON.parse(request.body.read)
|
|
|
|
email = login_details['email']
|
|
password = login_details['password']
|
|
|
|
res = User.find_by(email: email).try(:authenticate, password) # => false
|
|
if res
|
|
#TODO : encrypt this cookie
|
|
response.set_cookie('ribica_auth', :path=> '/', :httponly => true, :value=>res.id, :expires=>Time.now+100.year)
|
|
res.to_json(except: 'password_digest')
|
|
else
|
|
status 401
|
|
{:error => "email ili lozinka neispravni!"}.to_json
|
|
end
|
|
end
|
|
|
|
get '/user' do
|
|
auth = cookies['ribica_auth']
|
|
if not auth.nil?
|
|
return User.find_by(id: auth).to_json(except: 'password_digest')
|
|
end
|
|
end
|
|
|
|
post '/user' do
|
|
request.body.rewind
|
|
json = request.body.read
|
|
|
|
user = User.new()
|
|
user.from_json(json, false)
|
|
|
|
if user.save
|
|
response.set_cookie('ribica_auth', :path=> '/', :httponly => true, :value=>user.id, :expires=>Time.now+100.year)
|
|
user.to_json(except: 'password_digest')
|
|
else
|
|
status 400
|
|
user.errors.to_json
|
|
end
|
|
end
|