philomena/lib/philomena_web/controllers/confirmation_controller.ex
2024-06-06 22:28:35 +02:00

46 lines
1.2 KiB
Elixir

defmodule PhilomenaWeb.ConfirmationController do
use PhilomenaWeb, :controller
alias Philomena.Users
plug PhilomenaWeb.CaptchaPlug
plug PhilomenaWeb.CheckCaptchaPlug when action in [:create]
def new(conn, _params) do
render(conn, "new.html")
end
def create(conn, %{"user" => %{"email" => email}}) do
if user = Users.get_user_by_email(email) do
Users.deliver_user_confirmation_instructions(
user,
&url(~p"/confirmations/#{&1}")
)
end
# Regardless of the outcome, show an impartial success/error message.
conn
|> put_flash(
:alert,
"If your email is in our system and it has not been confirmed yet, " <>
"you will receive an email with instructions shortly."
)
|> redirect(to: "/")
end
# Do not log in the user after confirmation to avoid a
# leaked token giving the user access to the account.
def show(conn, %{"id" => token}) do
case Users.confirm_user(token) do
{:ok, _} ->
conn
|> put_flash(:info, "Account confirmed successfully.")
|> redirect(to: "/")
:error ->
conn
|> put_flash(:warning, "Confirmation link is invalid or it has expired.")
|> redirect(to: "/")
end
end
end