Rob Zolkos
8ee2d7d65f
* Add JSON response format to access token creation Allows programmatic clients (e.g., CLI) to create access tokens via the API by returning the token, description, and permission as JSON instead of redirecting to the HTML show page. * Add JSON response format to access token creation Allows programmatic clients (e.g., CLI) to create access tokens via the API by returning the token, description, and permission as JSON instead of redirecting to the HTML show page. * Style --------- Co-authored-by: David Heinemeier Hansson <david@hey.com>
50 lines
1.2 KiB
Ruby
50 lines
1.2 KiB
Ruby
class My::AccessTokensController < ApplicationController
|
|
def index
|
|
@access_tokens = my_access_tokens.order(created_at: :desc)
|
|
end
|
|
|
|
def show
|
|
@access_token = my_access_tokens.find(verifier.verify(params[:id]))
|
|
rescue ActiveSupport::MessageVerifier::InvalidSignature
|
|
redirect_to my_access_tokens_path, alert: "Token is no longer visible"
|
|
end
|
|
|
|
def new
|
|
@access_token = my_access_tokens.new
|
|
end
|
|
|
|
def create
|
|
access_token = my_access_tokens.create!(access_token_params)
|
|
|
|
respond_to do |format|
|
|
format.html do
|
|
expiring_id = verifier.generate access_token.id, expires_in: 10.seconds
|
|
redirect_to my_access_token_path(expiring_id)
|
|
end
|
|
|
|
format.json do
|
|
render status: :created, json: \
|
|
{ token: access_token.token, description: access_token.description, permission: access_token.permission }
|
|
end
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
my_access_tokens.find(params[:id]).destroy!
|
|
redirect_to my_access_tokens_path
|
|
end
|
|
|
|
private
|
|
def my_access_tokens
|
|
Current.identity.access_tokens
|
|
end
|
|
|
|
def access_token_params
|
|
params.expect(access_token: %i[ description permission ])
|
|
end
|
|
|
|
def verifier
|
|
Rails.application.message_verifier(:access_tokens)
|
|
end
|
|
end
|