2016-11-15 09:56:29 -06:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-02-20 15:53:20 -06:00
|
|
|
class ApplicationController < ActionController::Base
|
|
|
|
# Prevent CSRF attacks by raising an exception.
|
|
|
|
# For APIs, you may want to use :null_session instead.
|
|
|
|
protect_from_forgery with: :exception
|
2016-03-25 08:12:24 -05:00
|
|
|
|
2017-04-23 19:44:05 -05:00
|
|
|
force_ssl if: :https_enabled?
|
|
|
|
|
2017-04-07 19:30:50 -05:00
|
|
|
include Localized
|
2017-04-29 17:28:16 -05:00
|
|
|
include UserTrackingConcern
|
2018-05-11 06:20:58 -05:00
|
|
|
include SessionTrackingConcern
|
2019-07-21 15:32:16 -05:00
|
|
|
include CacheConcern
|
2017-04-16 05:51:30 -05:00
|
|
|
|
|
|
|
helper_method :current_account
|
2017-06-25 16:51:32 -05:00
|
|
|
helper_method :current_session
|
2017-09-19 09:36:23 -05:00
|
|
|
helper_method :current_theme
|
2017-04-16 05:51:30 -05:00
|
|
|
helper_method :single_user_mode?
|
2018-02-28 12:04:53 -06:00
|
|
|
helper_method :use_seamless_external_login?
|
2016-08-24 10:56:44 -05:00
|
|
|
|
2016-09-07 19:40:51 -05:00
|
|
|
rescue_from ActionController::RoutingError, with: :not_found
|
|
|
|
rescue_from ActiveRecord::RecordNotFound, with: :not_found
|
2017-01-14 17:30:23 -06:00
|
|
|
rescue_from ActionController::InvalidAuthenticityToken, with: :unprocessable_entity
|
2018-05-25 18:09:30 -05:00
|
|
|
rescue_from ActionController::UnknownFormat, with: :not_acceptable
|
2017-11-11 13:23:33 -06:00
|
|
|
rescue_from Mastodon::NotPermittedError, with: :forbidden
|
2016-09-07 19:40:51 -05:00
|
|
|
|
2016-10-06 08:42:00 -05:00
|
|
|
before_action :store_current_location, except: :raise_not_found, unless: :devise_controller?
|
2018-08-23 16:26:29 -05:00
|
|
|
before_action :check_user_permissions, if: :user_signed_in?
|
2016-10-02 10:11:08 -05:00
|
|
|
|
2016-09-07 19:40:51 -05:00
|
|
|
def raise_not_found
|
2016-09-29 14:28:21 -05:00
|
|
|
raise ActionController::RoutingError, "No route matches #{params[:unmatched_route]}"
|
2016-09-07 19:40:51 -05:00
|
|
|
end
|
|
|
|
|
2016-10-02 10:11:08 -05:00
|
|
|
private
|
|
|
|
|
2017-04-23 19:44:05 -05:00
|
|
|
def https_enabled?
|
2018-01-07 08:19:23 -06:00
|
|
|
Rails.env.production?
|
2017-04-23 19:44:05 -05:00
|
|
|
end
|
|
|
|
|
2019-07-11 13:11:09 -05:00
|
|
|
def authorized_fetch_mode?
|
|
|
|
ENV['AUTHORIZED_FETCH'] == 'true'
|
|
|
|
end
|
|
|
|
|
|
|
|
def public_fetch_mode?
|
|
|
|
!authorized_fetch_mode?
|
|
|
|
end
|
|
|
|
|
2016-10-02 10:11:08 -05:00
|
|
|
def store_current_location
|
2018-02-21 17:51:30 -06:00
|
|
|
store_location_for(:user, request.url) unless request.format == :json
|
2016-10-02 10:11:08 -05:00
|
|
|
end
|
|
|
|
|
2016-11-28 11:45:13 -06:00
|
|
|
def require_admin!
|
2018-04-03 06:07:32 -05:00
|
|
|
forbidden unless current_user&.admin?
|
2016-11-28 11:45:13 -06:00
|
|
|
end
|
|
|
|
|
2017-11-11 13:23:33 -06:00
|
|
|
def require_staff!
|
2018-04-03 06:07:32 -05:00
|
|
|
forbidden unless current_user&.staff?
|
2017-11-11 13:23:33 -06:00
|
|
|
end
|
|
|
|
|
2018-08-23 16:26:29 -05:00
|
|
|
def check_user_permissions
|
|
|
|
forbidden if current_user.disabled? || current_user.account.suspended?
|
2016-12-06 11:03:30 -06:00
|
|
|
end
|
|
|
|
|
2017-08-04 21:24:58 -05:00
|
|
|
def after_sign_out_path_for(_resource_or_scope)
|
|
|
|
new_user_session_path
|
|
|
|
end
|
|
|
|
|
2016-08-18 10:13:41 -05:00
|
|
|
protected
|
|
|
|
|
2018-09-08 21:10:44 -05:00
|
|
|
def truthy_param?(key)
|
|
|
|
ActiveModel::Type::Boolean.new.cast(params[key])
|
|
|
|
end
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def forbidden
|
|
|
|
respond_with_error(403)
|
2016-09-07 19:40:51 -05:00
|
|
|
end
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def not_found
|
|
|
|
respond_with_error(404)
|
2017-01-14 17:30:23 -06:00
|
|
|
end
|
|
|
|
|
2017-05-01 15:24:36 -05:00
|
|
|
def gone
|
|
|
|
respond_with_error(410)
|
2017-04-22 22:21:10 -05:00
|
|
|
end
|
|
|
|
|
2017-01-14 17:30:23 -06:00
|
|
|
def unprocessable_entity
|
2017-05-01 15:24:36 -05:00
|
|
|
respond_with_error(422)
|
2016-10-05 06:26:44 -05:00
|
|
|
end
|
|
|
|
|
2018-05-25 18:09:30 -05:00
|
|
|
def not_acceptable
|
|
|
|
respond_with_error(406)
|
|
|
|
end
|
|
|
|
|
2017-04-15 09:46:27 -05:00
|
|
|
def single_user_mode?
|
2019-07-18 18:44:42 -05:00
|
|
|
@single_user_mode ||= Rails.configuration.x.single_user_mode && Account.where('id > 0').exists?
|
2017-04-15 09:46:27 -05:00
|
|
|
end
|
|
|
|
|
2018-02-28 12:04:53 -06:00
|
|
|
def use_seamless_external_login?
|
|
|
|
Devise.pam_authentication || Devise.ldap_authentication
|
2018-02-02 03:18:55 -06:00
|
|
|
end
|
|
|
|
|
2016-08-18 10:13:41 -05:00
|
|
|
def current_account
|
2019-06-25 13:18:15 -05:00
|
|
|
return @current_account if defined?(@current_account)
|
|
|
|
|
|
|
|
@current_account = current_user&.account
|
2016-08-18 10:13:41 -05:00
|
|
|
end
|
2016-11-29 08:49:39 -06:00
|
|
|
|
2017-06-25 16:51:32 -05:00
|
|
|
def current_session
|
2019-06-25 13:18:15 -05:00
|
|
|
return @current_session if defined?(@current_session)
|
|
|
|
|
|
|
|
@current_session = SessionActivation.find_by(session_id: cookies.signed['_session_id']) if cookies.signed['_session_id'].present?
|
2017-06-25 16:51:32 -05:00
|
|
|
end
|
|
|
|
|
2017-09-19 09:36:23 -05:00
|
|
|
def current_theme
|
2018-08-23 07:17:35 -05:00
|
|
|
return Setting.theme unless Themes.instance.names.include? current_user&.setting_theme
|
2017-09-19 09:36:23 -05:00
|
|
|
current_user.setting_theme
|
|
|
|
end
|
|
|
|
|
2017-04-21 11:11:20 -05:00
|
|
|
def respond_with_error(code)
|
2017-05-01 15:24:36 -05:00
|
|
|
respond_to do |format|
|
|
|
|
format.any { head code }
|
2019-07-21 11:08:02 -05:00
|
|
|
format.html { render "errors/#{code}", layout: 'error', status: code }
|
2017-05-01 15:24:36 -05:00
|
|
|
end
|
2017-04-21 11:11:20 -05:00
|
|
|
end
|
2016-02-20 15:53:20 -06:00
|
|
|
end
|