106 lines
2.6 KiB
Ruby
106 lines
2.6 KiB
Ruby
class ApplicationController < ActionController::Base
|
|
include BotBlocker
|
|
|
|
# Changes to the importmap will invalidate the etag for HTML responses
|
|
stale_when_importmap_changes
|
|
|
|
SESSION_TIMEOUT = 3.days
|
|
|
|
before_action :check_session_timeout
|
|
|
|
helper_method :supported_languages, :current_user, :logged_in?, :admin?, :reviewer_or_admin?,
|
|
:contributor_or_above?, :setup_completed?
|
|
|
|
private
|
|
|
|
def supported_languages
|
|
@supported_languages ||= SupportedLanguage.where(active: true).order(:sort_order, :name)
|
|
end
|
|
|
|
def current_user
|
|
return @current_user if defined?(@current_user)
|
|
|
|
# First check session
|
|
if session[:user_id]
|
|
@current_user = User.find_by(id: session[:user_id])
|
|
# Then check remember me cookie
|
|
elsif cookies.signed[:remember_token]
|
|
user = User.find_by_valid_remember_token(cookies.signed[:remember_token])
|
|
if user
|
|
session[:user_id] = user.id
|
|
@current_user = user
|
|
else
|
|
# Invalid or expired remember token, clear it
|
|
cookies.delete(:remember_token)
|
|
end
|
|
end
|
|
|
|
@current_user
|
|
end
|
|
|
|
def check_session_timeout
|
|
return unless logged_in?
|
|
return if cookies.signed[:remember_token].present?
|
|
|
|
if session[:last_activity_at].present?
|
|
last_activity = Time.parse(session[:last_activity_at])
|
|
if last_activity < SESSION_TIMEOUT.ago
|
|
reset_session
|
|
redirect_to login_path, alert: "Your session has expired. Please sign in again."
|
|
return
|
|
end
|
|
end
|
|
|
|
session[:last_activity_at] = Time.current.to_s
|
|
end
|
|
|
|
def logged_in?
|
|
current_user.present?
|
|
end
|
|
|
|
def admin?
|
|
logged_in? && current_user.admin?
|
|
end
|
|
|
|
def reviewer_or_admin?
|
|
logged_in? && (current_user.reviewer? || current_user.admin?)
|
|
end
|
|
|
|
def contributor_or_above?
|
|
logged_in?
|
|
end
|
|
|
|
def require_login
|
|
unless logged_in?
|
|
redirect_to login_path, alert: "You must be logged in to access this page."
|
|
end
|
|
end
|
|
|
|
def require_admin
|
|
unless logged_in?
|
|
redirect_to login_path, alert: "You must be logged in to access this page."
|
|
return
|
|
end
|
|
|
|
unless current_user.admin?
|
|
redirect_to root_path, alert: "You must be an administrator to access this page."
|
|
end
|
|
end
|
|
|
|
def require_reviewer
|
|
unless reviewer_or_admin?
|
|
redirect_to root_path, alert: "You must be a reviewer or administrator to access this page."
|
|
end
|
|
end
|
|
|
|
def require_contributor
|
|
unless contributor_or_above?
|
|
redirect_to root_path, alert: "You must be a contributor to access this page."
|
|
end
|
|
end
|
|
|
|
def setup_completed?
|
|
SetupState.installed?
|
|
end
|
|
end
|