ee82d8a876
The force_ssl method from controllers does not add all of the options that the sitewide configuration in a config block does. For example, HSTS enforcement is not added by the controller method, but is added by this style.
109 lines
3 KiB
Ruby
109 lines
3 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class ApplicationController < ActionController::Base
|
|
# Prevent CSRF attacks by raising an exception.
|
|
# For APIs, you may want to use :null_session instead.
|
|
protect_from_forgery with: :exception
|
|
|
|
include Localized
|
|
|
|
helper_method :current_account
|
|
helper_method :single_user_mode?
|
|
|
|
rescue_from ActionController::RoutingError, with: :not_found
|
|
rescue_from ActiveRecord::RecordNotFound, with: :not_found
|
|
rescue_from ActionController::InvalidAuthenticityToken, with: :unprocessable_entity
|
|
|
|
before_action :store_current_location, except: :raise_not_found, unless: :devise_controller?
|
|
before_action :set_user_activity
|
|
before_action :check_suspension, if: :user_signed_in?
|
|
|
|
def raise_not_found
|
|
raise ActionController::RoutingError, "No route matches #{params[:unmatched_route]}"
|
|
end
|
|
|
|
private
|
|
|
|
def store_current_location
|
|
store_location_for(:user, request.url)
|
|
end
|
|
|
|
def require_admin!
|
|
redirect_to root_path unless current_user&.admin?
|
|
end
|
|
|
|
def set_user_activity
|
|
return unless !current_user.nil? && (current_user.current_sign_in_at.nil? || current_user.current_sign_in_at < 24.hours.ago)
|
|
|
|
# Mark user as signed-in today
|
|
current_user.update_tracked_fields(request)
|
|
|
|
# If the sign in is after a two week break, we need to regenerate their feed
|
|
RegenerationWorker.perform_async(current_user.account_id) if current_user.last_sign_in_at < 14.days.ago
|
|
end
|
|
|
|
def check_suspension
|
|
head 403 if current_user.account.suspended?
|
|
end
|
|
|
|
protected
|
|
|
|
def not_found
|
|
respond_to do |format|
|
|
format.any { head 404 }
|
|
format.html { respond_with_error(404) }
|
|
end
|
|
end
|
|
|
|
def gone
|
|
respond_to do |format|
|
|
format.any { head 410 }
|
|
format.html { respond_with_error(410) }
|
|
end
|
|
end
|
|
|
|
def unprocessable_entity
|
|
respond_to do |format|
|
|
format.any { head 422 }
|
|
format.html { respond_with_error(422) }
|
|
end
|
|
end
|
|
|
|
def single_user_mode?
|
|
@single_user_mode ||= Rails.configuration.x.single_user_mode && Account.first
|
|
end
|
|
|
|
def current_account
|
|
@current_account ||= current_user.try(:account)
|
|
end
|
|
|
|
def cache_collection(raw, klass)
|
|
return raw unless klass.respond_to?(:with_includes)
|
|
|
|
raw = raw.cache_ids.to_a if raw.is_a?(ActiveRecord::Relation)
|
|
uncached_ids = []
|
|
cached_keys_with_value = Rails.cache.read_multi(*raw.map(&:cache_key))
|
|
|
|
raw.each do |item|
|
|
uncached_ids << item.id unless cached_keys_with_value.key?(item.cache_key)
|
|
end
|
|
|
|
klass.reload_stale_associations!(cached_keys_with_value.values) if klass.respond_to?(:reload_stale_associations!)
|
|
|
|
unless uncached_ids.empty?
|
|
uncached = klass.where(id: uncached_ids).with_includes.map { |item| [item.id, item] }.to_h
|
|
|
|
uncached.values.each do |item|
|
|
Rails.cache.write(item.cache_key, item)
|
|
end
|
|
end
|
|
|
|
raw.map { |item| cached_keys_with_value[item.cache_key] || uncached[item.id] }.compact
|
|
end
|
|
|
|
def respond_with_error(code)
|
|
set_locale do
|
|
render "errors/#{code}", layout: 'error', status: code
|
|
end
|
|
end
|
|
end
|