innoq/iqvoc

# encoding: UTF-8

# Copyright 2011-2013 innoQ Deutschland GmbH
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

class UserSessionsController < ApplicationController
  def new
    authorize! :create, UserSession

    @user_session = UserSession.new
    request.session_options[:skip] = false
  end

  def create
    authorize! :create, UserSession

    @user_session = UserSession.new(user_session_params.to_h)
    request.session_options[:skip] = false

    if @user_session.save
      @current_ability = nil
      flash[:success] = I18n.t('txt.controllers.user_sessions.login_success')
      if params[:back_to].present?
        redirect_to URI.parse(params[:back_to]).path
      else
        redirect_to can?(:use, :dashboard) ? dashboard_path : root_path
      end
    else
      flash[:error] = I18n.t('txt.views.user_sessions.error')
      render action: :new
    end
  end

  def destroy
    authorize! :destroy, UserSession

    current_user_session.destroy
    flash[:success] = I18n.t('txt.controllers.user_sessions.logout_success')
    redirect_to new_user_session_path
  end

  private

  def user_session_params
    params.require(:user_session).permit(:email, :password)
  end
end