jnaqsh/nerdnews

class IdentitiesController < ApplicationController
  load_and_authorize_resource
  skip_before_filter  :verify_authenticity_token, :only => :create

  def index
    @identities = current_user.identities.order('provider asc')
    @providers = Identity.providers
  end

  # callback: success
  # This handles signing in and adding an authentication provider to existing accounts itself
  def create
    session[:authhash] = nil #ensure no one sets it
    omniauth = request.env['omniauth.auth']
    provider = request.env['omniauth.auth']['provider']
    @authhash = Hash.new

    if omniauth and provider
      if ['default', 'myopenid', 'google', 'twitter', 'github', 'yahoo', 'browser_id'].include? provider
        omniauth['info']['email'] ? @authhash[:email] =  omniauth['info']['email'] : @authhash[:email] = ''
        omniauth['info']['name'] ? @authhash[:name] =  omniauth['info']['name'] : @authhash[:name] = ''
        omniauth['uid'] ? @authhash[:uid] = omniauth['uid'].to_s : @authhash[:uid] = ''
        omniauth['provider'] ? @authhash[:provider] = omniauth['provider'] : @authhash[:provider] = ''
      else
        # debug to output the hash that has been returned when adding new services
        render text: omniauth.to_yaml
        return
      end

      if @authhash[:uid].present? and @authhash[:provider].present?
        auth = Identity.find_by_provider_and_uid(@authhash[:provider], @authhash[:uid])

        # if the user is currently signed in, he/she might want to add another account to signin
        if current_user
          if auth
            redirect_to root_path, flash: { error: t('controllers.identities.flash.already_exist', provider: @authhash[:provider].capitalize) }
          else
            current_user.identities.create!(provider: @authhash[:provider], uid: @authhash[:uid])
            redirect_to identities_path, notice: t('controllers.identities.flash.added_successfully', provider: @authhash[:provider].capitalize)
          end
        else
          if auth
            # signin existing user
            # in the session his user id and the service id used for signing in is stored
            cookies.permanent.signed[:user_id] = auth.user.id
            session[:service_id] = auth.id
            redirect_to root_url, notice: t('controllers.identities.flash.signedin_successfully', provider: @authhash[:provider].capitalize)
          else
            # this is a new user; show signup; @authhash is available to the view and stored in the sesssion for creation of a new user
            session[:authhash] = @authhash
            redirect_to new_user_path
          end
        end
      else
        redirect_to root_path, flash: { error: t('controllers.identities.flash.authenticating_error', provider: @authhash[:provider].capitalize) }
      end
    else
      redirect_to root_path, flash: { error: t('controllers.identities.flash.authenticating_error', provider: @authhash[:provider].capitalize) }
    end
  end

  def destroy
    # remove an authentication service linked to the current user
    @identity = current_user.identities.find(params[:id])

    if session[:service_id] == @identity.id
      flash[:error] = t('controllers.identities.flash.signin_error')
    else
      @identity.destroy
    end
    redirect_to identities_path, notice: t('controllers.identities.flash.successfully_removed')
  end

  # callback: failure
  def failure
    redirect_to root_url, flash: { error: t('controllers.identities.flash.notloggedin') }
  end
  private
    def identity_params
      params.permit(:oauth_token, :oauth_verifier, :controller, :action, :provider, :assertion)
    end
end