2020-01-07 17:29:17 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
module Avatarable
|
|
|
|
extend ActiveSupport::Concern
|
|
|
|
include Rails.application.routes.url_helpers
|
|
|
|
|
|
|
|
included do
|
|
|
|
has_one_attached :avatar
|
chore: Security Improvements to the API (#2893)
- Devise auth tokens are reset on password update
- Avatar attachment file type is limited to jpeg,gif and png
- Avatar attachment file size is limited to 15 mb
- Widget Message attachments are limited to types ['image/png', 'image/jpeg', 'image/gif', 'image/bmp', 'image/tiff', 'application/pdf', 'audio/mpeg', 'video/mp4', 'audio/ogg', 'text/csv']
- Widget Message attachments are limited to 40Mb size limit.
2021-09-01 09:38:05 +00:00
|
|
|
validate :acceptable_avatar
|
2020-01-07 17:29:17 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def avatar_url
|
2020-11-13 14:26:30 +00:00
|
|
|
return url_for(avatar.representation(resize: '250x250')) if avatar.attached? && avatar.representable?
|
|
|
|
|
|
|
|
if [User, Contact].include?(self.class) && email.present?
|
|
|
|
hash = Digest::MD5.hexdigest(email)
|
|
|
|
return "https://www.gravatar.com/avatar/#{hash}?d=404"
|
2020-01-07 17:29:17 +00:00
|
|
|
end
|
2020-11-13 14:26:30 +00:00
|
|
|
|
|
|
|
''
|
2020-01-07 17:29:17 +00:00
|
|
|
end
|
chore: Security Improvements to the API (#2893)
- Devise auth tokens are reset on password update
- Avatar attachment file type is limited to jpeg,gif and png
- Avatar attachment file size is limited to 15 mb
- Widget Message attachments are limited to types ['image/png', 'image/jpeg', 'image/gif', 'image/bmp', 'image/tiff', 'application/pdf', 'audio/mpeg', 'video/mp4', 'audio/ogg', 'text/csv']
- Widget Message attachments are limited to 40Mb size limit.
2021-09-01 09:38:05 +00:00
|
|
|
|
|
|
|
def acceptable_avatar
|
|
|
|
return unless avatar.attached?
|
|
|
|
|
|
|
|
errors.add(:avatar, 'is too big') if avatar.byte_size > 15.megabytes
|
|
|
|
|
|
|
|
acceptable_types = ['image/jpeg', 'image/png', 'image/gif'].freeze
|
|
|
|
errors.add(:avatar, 'filetype not supported') unless acceptable_types.include?(avatar.content_type)
|
|
|
|
end
|
2020-01-07 17:29:17 +00:00
|
|
|
end
|