summaryrefslogtreecommitdiff
path: root/app/controllers/api/users_controller.rb
diff options
context:
space:
mode:
Diffstat (limited to 'app/controllers/api/users_controller.rb')
-rw-r--r--app/controllers/api/users_controller.rb83
1 files changed, 83 insertions, 0 deletions
diff --git a/app/controllers/api/users_controller.rb b/app/controllers/api/users_controller.rb
new file mode 100644
index 0000000..e64d21f
--- /dev/null
+++ b/app/controllers/api/users_controller.rb
@@ -0,0 +1,83 @@
+module Api
+ class UsersController < ApiController
+ include ControllerExtension::FetchUser
+
+ # allow optional access to this controller using API auth tokens:
+ before_filter :token_authenticate
+
+ before_filter :fetch_user, :only => [:update, :destroy]
+ before_filter :require_monitor, :only => [:index, :show]
+ before_filter :require_login, :only => [:index, :update, :destroy]
+
+ respond_to :json
+
+ # used for autocomplete for admins in the web ui
+ def index
+ if params[:query]
+ @users = User.login_starts_with(params[:query])
+ respond_with @users.map(&:login).sort
+ else
+ render :json => {'error' => 'query required', 'status' => :unprocessable_entity}
+ end
+ end
+
+ def show
+ if params[:login]
+ @user = User.find_by_login(params[:login])
+ elsif params[:id]
+ @user = User.find(params[:id])
+ end
+ if @user
+ respond_with @user
+ else
+ not_found
+ end
+ end
+
+ def create
+ if current_user.is_monitor?
+ create_test_account
+ elsif APP_CONFIG[:allow_registration]
+ create_account
+ else
+ head :forbidden
+ end
+ end
+
+ def update
+ @user.account.update params[:user]
+ respond_with @user
+ end
+
+ def destroy
+ destroy_identity = current_user.is_monitor? || params[:identities] == "destroy"
+ @user.account.destroy(destroy_identity)
+ if @user == current_user
+ logout
+ end
+ render :json => {'success' => 'user deleted'}
+ end
+
+ private
+
+ # tester auth can only create test users.
+ def create_test_account
+ if User::is_test?(params[:user][:login])
+ @user = Account.create(params[:user], :invite_required => false)
+ respond_with @user
+ else
+ head :forbidden
+ end
+ end
+
+ def create_account
+ if APP_CONFIG[:allow_registration]
+ @user = Account.create(params[:user])
+ respond_with @user # return ID instead?
+ else
+ head :forbidden
+ end
+ end
+
+ end
+end