740f8a95a9
* Add consumable invites * Add UI for generating invite codes * Add tests * Display max uses and expiration in invites table, delete invite * Remove unused column and redundant validator - Default follows not used, probably bad idea - InviteCodeValidator is redundant because RegistrationsController checks invite code validity * Add admin setting to disable invites * Add admin UI for invites, configurable role for invite creation - Admin UI that lists everyone's invites, always available - Admin setting min_invite_role to control who can invite people - Non-admin invite UI only visible if users are allowed to * Do not remove invites from database, expire them instantly
43 lines
850 B
Ruby
43 lines
850 B
Ruby
# frozen_string_literal: true
|
|
|
|
class InvitesController < ApplicationController
|
|
include Authorization
|
|
|
|
layout 'admin'
|
|
|
|
before_action :authenticate_user!
|
|
|
|
def index
|
|
authorize :invite, :create?
|
|
|
|
@invites = Invite.where(user: current_user)
|
|
@invite = Invite.new(expires_in: 1.day.to_i)
|
|
end
|
|
|
|
def create
|
|
authorize :invite, :create?
|
|
|
|
@invite = Invite.new(resource_params)
|
|
@invite.user = current_user
|
|
|
|
if @invite.save
|
|
redirect_to invites_path
|
|
else
|
|
@invites = Invite.where(user: current_user)
|
|
render :index
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
@invite = Invite.where(user: current_user).find(params[:id])
|
|
authorize @invite, :destroy?
|
|
@invite.expire!
|
|
redirect_to invites_path
|
|
end
|
|
|
|
private
|
|
|
|
def resource_params
|
|
params.require(:invite).permit(:max_uses, :expires_in)
|
|
end
|
|
end
|