class ApplicationController < ActionController::Base
before_filter :require_login
def require_login
if authenticated?
create_new_authentication()
unless controller_name == 'chat'
redirect_to chat_path
end
else
unless controller_name == 'sessions' && (action_name == 'new' || action_name == 'create')
redirect_to root_url, flash: {error: I18n.t('login.access-denied')}
end
end
end
protected
def authenticated?
@token = Token.authenticate(session)
end
def create_new_authentication(jid = nil)
if @token
user_id = @token.user_id
@token.delete
else
user_id = jid.nil? ? nil : create_new_user(jid)
end
@token = Token.new
save_session(user_id)
end
def save_session(user_id)
session[:token] = Token.generate_token()
session[:created_at] = Time.now
session[:ip] = request.remote_ip
@token.save_session(session, user_id)
end
def create_new_user(jid)
user = User.new(jid: jid)
user.id if user.save
end
end