sanger/sequencescape

# frozen_string_literal: true
require_relative '../../lib/deployment_environment'

class SessionsController < ApplicationController
  # WARNING! This filter bypasses security mechanisms in rails 4 and mimics rails 2 behviour.
  # It should be removed wherever possible and the correct Strong  Parameter options applied in its place.
  before_action :evil_parameter_hack!
  include Informatics::Globals

  skip_before_action :login_required

  def index
    redirect_to action: :login
  end

  def settings
  end

  def login
    return unless request.post?

    self.current_user = User.authenticate(params[:login], params[:password])
    if logged_in?
      flash[:notice] = 'Logged in successfully'
      redirect_back_or_default(controller: :studies)
    else
      flash.now[:error] = "Your log in details don't match our records. Please try again." if params
    end
  end

  def logout
    current_user.forget_me if logged_in?
    cookies.delete :auth_token
    reset_session
    flash[:notice] = 'You have been logged out.'
    redirect_back_or_default(controller: :studies)
  end
end