blob: c8deb7a27abb89229099bde06ad594ebaa4979b5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
module Api
class SessionsController < ApiController
before_filter :require_login, only: :destroy
def new
@session = Session.new
if authentication_errors
@errors = authentication_errors
render :status => 422
end
end
def create
logout if logged_in?
if params['A']
authenticate!
else
@user = User.find_by_login(params['login'])
render :json => {salt: @user.salt}
end
end
def update
authenticate!
@token = Token.create(:user_id => current_user.id)
session[:token] = @token.id
render :json => login_response
end
def destroy
logout
head :no_content
end
protected
def login_response
handshake = session.delete(:handshake) || {}
handshake.to_hash.merge(:id => current_user.id, :token => @token.to_s)
end
end
end
|
