blob: eae3a1efaf2093e99f1339e56b21a6d57b8e7183 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
module V1
class SessionsController < ApplicationController
skip_before_filter :verify_authenticity_token
before_filter :require_token, only: :destroy
def new
@session = Session.new
if authentication_errors
@errors = authentication_errors
render :status => 422
end
end
def create
logout if logged_in?
if params['A']
authenticate!
else
@user = User.find_by_login(params['login'])
render :json => {salt: @user.salt}
end
end
def update
authenticate!
@token = Token.create(:user_id => current_user.id)
session[:token] = @token.id
render :json => login_response
end
def destroy
logout
head :no_content
end
protected
def login_response
handshake = session.delete(:handshake) || {}
handshake.to_hash.merge(:id => current_user.id, :token => @token.id)
end
end
end
|
