it3s/meppit

class ApplicationController < ActionController::Base
  include Utils

  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception

  before_action :set_locale, except: :language
  before_action :logged_in_cookie

  def language
    code = params[:code]
    if I18n.available_locales.include? code.to_sym
      current_user.update(language: code) if current_user
      session[:language] = code
    end
    redirect_to :back
  end

  def search
    @results = paginate find_search_results
    render 'shared/search_results', layout: nil
  end

  def not_authenticated
    redirect_to login_path
  end

  def current_url(overwrite={})
    url_for :only_path => false, :params => params.except(:action, :controller).merge(overwrite)
  end

  protected

    def require_admin
      redirect_to(root_path, notice: t('access_denied')) unless current_user.admin?
    end

    def set_locale
      I18n.locale = (current_user.try(:language) || session[:language] ||
                     extract_from_header || I18n.default_locale)
    end

    def extract_from_header
      http_accept_language.compatible_language_from(I18n.available_locales)
    end

    def logged_in_cookie
      logged_in? ? set_logged_in_cookie : destroy_logged_in_cookie
    end

    def find_search_results
      PgSearch.multisearch(params[:term]).includes(:searchable).limit(20).map { |d| d.searchable }
    end
end