mconf/mconf-web

class CertificateAuthenticationController < ApplicationController

  def login
    certificate = request.headers['SSL_CLIENT_CERT']

    @cert = Mconf::SSLClientCert.new(certificate, session)

    if create_account?
      @cert.create_user
      @user = @cert.user

      if @user.present?

        if @user.active_for_authentication?
          sign_in :user, @user
          @cert.set_signed_in
          redir_url = after_sign_in_path_for(current_user)
        else
          redir_url = my_approval_pending_path
        end

        respond_to do |format|
          format.json { render json: { result: true, redirect_to: redir_url }, status: 200 }
        end
      else
        error = @cert.error || 'unknown'
        msg = I18n.t("certificate_authentication.error.#{error}")

        respond_to do |format|
          format.json { render json: { result: false, error: msg }, status: 200 }
        end
      end

    else
      sign_in_guest(@cert.get_name, @cert.get_email)

      respond_to do |format|
        format.json { render json: { result: true, redirect_to: user_return_to }, status: 200 }
      end
    end
  end

  private

  def create_account?
    # defaults to true, to create an account, unless:
    params[:create] != "false" && params[:create] != false
  end
end