app/controllers/auth_controller.rb
# frozen_string_literal: true
class AuthController < ApplicationController
before_action(except: [:forget_impersonated_groups]) do
authorize! :impersonate, User
end
def groups
# does default render
end
def remember_impersonated_groups
groups = params[:groups].split(',')
session[:groups] = groups
redirect_to root_path
end
def forget_impersonated_groups
session[:groups] = nil
redirect_to root_path
end
end