42 lines
1.2 KiB
Ruby
42 lines
1.2 KiB
Ruby
|
class User::SessionsController < Devise::SessionsController
|
||
|
|
def create
|
||
|
|
if session.has_key?(:user_sign_in_uid)
|
||
|
|
self.resource = User.find(session[:user_sign_in_uid])
|
||
|
|
session.delete(:user_sign_in_uid)
|
||
|
|
else
|
||
|
|
self.resource = warden.authenticate!(auth_options)
|
||
|
|
end
|
||
|
|
|
||
|
|
if resource.active_for_authentication? && !resource.otp_secret_key.nil?
|
||
|
|
if params[:user][:otp_attempt].blank?
|
||
|
|
session[:user_sign_in_uid] = resource.id
|
||
|
|
sign_out(resource)
|
||
|
|
redirect_to user_two_factor_entry_url
|
||
|
|
else
|
||
|
|
if resource.authenticate_otp(params[:user][:otp_attempt])
|
||
|
|
continue_sign_in(resource, resource_name)
|
||
|
|
else
|
||
|
|
sign_out(resource)
|
||
|
|
flash[:error] = t('devise.failure.invalid')
|
||
|
|
redirect_to root_url
|
||
|
|
end
|
||
|
|
end
|
||
|
|
else
|
||
|
|
continue_sign_in(resource, resource_name)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
def two_factor_entry
|
||
|
|
self.resource = User.find(session[:user_sign_in_uid])
|
||
|
|
render 'auth/two_factor_authentication'
|
||
|
|
end
|
||
|
|
|
||
|
|
private
|
||
|
|
|
||
|
|
def continue_sign_in(resource, resource_name)
|
||
|
|
set_flash_message!(:notice, :signed_in)
|
||
|
|
sign_in(resource_name, resource)
|
||
|
|
yield resource if block_given?
|
||
|
|
respond_with resource, location: after_sign_in_path_for(resource)
|
||
|
|
end
|
||
|
|
end
|