Chatwoot/app/controllers/devise_overrides/passwords_controller.rb

49 lines
1.6 KiB
Ruby
Raw Normal View History

2020-02-02 17:22:38 +00:00
class DeviseOverrides::PasswordsController < Devise::PasswordsController
include AuthHelper
skip_before_action :require_no_authentication, raise: false
skip_before_action :authenticate_user!, raise: false
def update
2019-10-20 08:47:26 +00:00
# params: reset_password_token, password, password_confirmation
original_token = params[:reset_password_token]
reset_password_token = Devise.token_generator.digest(self, :reset_password_token, original_token)
@recoverable = User.find_by(reset_password_token: reset_password_token)
if @recoverable && reset_password_and_confirmation(@recoverable)
send_auth_headers(@recoverable)
render json: {
data: @recoverable.token_validation_response
}
else
2019-10-20 08:47:26 +00:00
render json: { "message": 'Invalid token', "redirect_url": '/' }, status: 422
end
end
def create
@user = User.find_by(email: params[:email])
if @user
@user.send_reset_password_instructions
2019-10-20 08:47:26 +00:00
build_response(I18n.t('messages.reset_password_success'), 200)
else
2019-10-20 08:47:26 +00:00
build_response(I18n.t('messages.reset_password_failure'), 404)
end
end
protected
def reset_password_and_confirmation(recoverable)
2019-10-20 08:47:26 +00:00
recoverable.confirm unless recoverable.confirmed? # confirm if user resets password without confirming anytime before
recoverable.reset_password(params[:password], params[:password_confirmation])
recoverable.reset_password_token = nil
recoverable.confirmation_token = nil
recoverable.reset_password_sent_at = nil
recoverable.save!
end
def build_response(message, status)
render json: {
2019-10-20 08:47:26 +00:00
"message": message
}, status: status
end
end