Module: Lato::Sessionable

Extended by:
ActiveSupport::Concern
Included in:
ApplicationController
Defined in:
app/controllers/concerns/lato/sessionable.rb

Instance Method Summary collapse

Instance Method Details

#authenticate_session ⇒ Object 



11
12
13
14
15
16
17
18
19
20
 
# File 'app/controllers/concerns/lato/sessionable.rb', line 11

def authenticate_session
  return true if @session.valid?

  respond_to do |format|
    format.html { redirect_to lato.root_path }
    format.json { render plain: '', status: :unauthorized }
  end

  false
end

#limit_requests(limit = 10, time_window = 10.minutes) ⇒ Object 



33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
 
# File 'app/controllers/concerns/lato/sessionable.rb', line 33

def limit_requests(limit = 10, time_window = 10.minutes)
  cache_key = "Lato::Sessionable/limit_requests/#{controller_name}/#{action_name}/#{request.remote_ip}"
  attempts = Rails.cache.read(cache_key) || 0
  
  attempts += 1
  Rails.cache.write(cache_key, attempts, expires_in: time_window)
  return true unless attempts >= limit

  respond_to do |format|
    format.html { render plain: "Too many requests, please wait #{time_window.to_i / 60} minutes to retry.", status: :too_many_requests }
    format.json { render json: {}, status: :too_many_requests }
  end

  false
end

#not_authenticate_session ⇒ Object 



22
23
24
25
26
27
28
29
30
31
 
# File 'app/controllers/concerns/lato/sessionable.rb', line 22

def not_authenticate_session
  return true unless @session.valid?

  respond_to do |format|
    format.html { redirect_to lato.root_path }
    format.json { render plain: '', status: :unauthorized }
  end

  false
end

#session_create(user_id) ⇒ Object 



49
50
51
52
53
54
 
# File 'app/controllers/concerns/lato/sessionable.rb', line 49

def session_create(user_id)
  cookies.encrypted[:lato_session] = { value: Lato::Session.generate_session_per_user(user_id), expires: Lato.config.session_lifetime.from_now }
  @session = Lato::Session.new(cookies.encrypted[:lato_session])

  true
end

#session_destroy ⇒ Object 



56
57
58
59
60
 
# File 'app/controllers/concerns/lato/sessionable.rb', line 56

def session_destroy
  cookies.encrypted[:lato_session] = nil

  true
end