daboh/plottservice
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Only users with verified emails are allowed to create new jobs

Browse Source
This commit is contained in:
David Böhm
2024-09-17 12:42:59 +02:00
parent b1b24a3b26
commit 848777481d
10 changed files with 37 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
app/controllers/application_controller.rb
View File

@@ -3,6 +3,7 @@ class ApplicationController < ActionController::Base
before_action :set_current_request_details before_action :set_current_request_details
before_action :authenticate_user! before_action :authenticate_user!
before_action :verified_user!
verify_authorized verify_authorized
@@ -29,6 +30,15 @@ class ApplicationController < ActionController::Base
end end
end end
def verified_user!
if user_signed_in?
unless current_user.verified?
flash[:notice] = "Please verify your email!"
redirect_to profile_path
end
end
end
def set_current_request_details def set_current_request_details
Current.user_agent = request.user_agent Current.user_agent = request.user_agent
Current.ip_address = request.ip Current.ip_address = request.ip

2
app/controllers/identity/email_verifications_controller.rb
View File

@@ -1,5 +1,7 @@
class Identity::EmailVerificationsController < ApplicationController class Identity::EmailVerificationsController < ApplicationController
skip_before_action :authenticate_user!, only: :show skip_before_action :authenticate_user!, only: :show
skip_before_action :verified_user!
skip_verify_authorized
before_action :set_user, only: :show before_action :set_user, only: :show

3
app/controllers/identity/emails_controller.rb
View File

@@ -1,4 +1,7 @@
class Identity::EmailsController < ApplicationController class Identity::EmailsController < ApplicationController
skip_before_action :verified_user!
skip_verify_authorized
before_action :set_user before_action :set_user
def edit def edit

1
app/controllers/identity/password_resets_controller.rb
View File

@@ -1,5 +1,6 @@
class Identity::PasswordResetsController < ApplicationController class Identity::PasswordResetsController < ApplicationController
skip_before_action :authenticate_user! skip_before_action :authenticate_user!
skip_verify_authorized
before_action :set_user, only: %i[ edit update ] before_action :set_user, only: %i[ edit update ]

1
app/controllers/jobs_controller.rb
View File

@@ -1,5 +1,6 @@
class JobsController < ApplicationController class JobsController < ApplicationController
skip_before_action :authenticate_user!, only: [ :index, :cancel_button ] skip_before_action :authenticate_user!, only: [ :index, :cancel_button ]
skip_before_action :verified_user!, only: [ :index ]
skip_verify_authorized only: [ :index, :new, :create, :cancel_button ] skip_verify_authorized only: [ :index, :new, :create, :cancel_button ]
# GET /jobs or /jobs.json # GET /jobs or /jobs.json

1
app/controllers/passwords_controller.rb
View File

@@ -1,5 +1,6 @@
class PasswordsController < ApplicationController class PasswordsController < ApplicationController
skip_verify_authorized only: [ :edit, :update ] skip_verify_authorized only: [ :edit, :update ]
skip_before_action :verified_user!
before_action :set_user before_action :set_user
def edit def edit

1
app/controllers/profiles_controller.rb
View File

@@ -1,5 +1,6 @@
class ProfilesController < ApplicationController class ProfilesController < ApplicationController
skip_verify_authorized only: [ :show, :edit, :destroy ] skip_verify_authorized only: [ :show, :edit, :destroy ]
skip_before_action :verified_user!
def show def show
end end

1
app/controllers/sessions_controller.rb
View File

@@ -1,5 +1,6 @@
class SessionsController < ApplicationController class SessionsController < ApplicationController
skip_before_action :authenticate_user!, only: %i[ new create ] skip_before_action :authenticate_user!, only: %i[ new create ]
skip_before_action :verified_user!
skip_verify_authorized only: [ :index, :new, :create, :destroy ] skip_verify_authorized only: [ :index, :new, :create, :destroy ]
before_action :set_session, only: :destroy before_action :set_session, only: :destroy

7
app/policies/application_policy.rb
View File

@@ -1,12 +1,17 @@
# Base class for application policies # Base class for application policies
class ApplicationPolicy < ActionPolicy::Base class ApplicationPolicy < ActionPolicy::Base
pre_check :allow_admins pre_check :allow_admins, :only_verified_users
# admin is good! :) # admin is good! :)
def allow_admins def allow_admins
allow! if user.admin? allow! if user.admin?
end end
# no email verification no rights
def only_verified_users
deny! unless user.verified?
end
# Configure additional authorization contexts here # Configure additional authorization contexts here
# (`user` is added by default). # (`user` is added by default).
# #

11
app/views/profiles/show.html.erb
View File

@@ -7,6 +7,17 @@
<% end %> <% end %>
</li> </li>
<li>E-Mail: <%= current_user.email %></li> <li>E-Mail: <%= current_user.email %></li>
<% if current_user.verified? %>
<p>
E-Mail is verified
</p>
<% else %>
<p>
<div>
Please validate your E-mail-adress (<%= button_to 'Re-send verification email', identity_email_verification_path, form_class: "inline" %>)
</div>
</p>
<% end %>
</ul> </ul>
<h2 class="text-lg font-bold p-1 border-b-2 border-hsrm-red">Aufgegebene Druckaufträge</h2> <h2 class="text-lg font-bold p-1 border-b-2 border-hsrm-red">Aufgegebene Druckaufträge</h2>
<p> <p>