Jorge Manrubia
39 lines
999 B
Ruby
39 lines
999 B
Ruby
class JoinCodesController < ApplicationController
|
|
require_untenanted_access
|
|
allow_unauthenticated_access
|
|
before_action :set_join_code
|
|
before_action :ensure_join_code_is_valid
|
|
|
|
def new
|
|
@account_name = ApplicationRecord.with_tenant(tenant) { Account.sole.name }
|
|
end
|
|
|
|
def create
|
|
Identity.transaction do
|
|
identity = Identity.find_or_create_by(email_address: params.expect(:email_address))
|
|
identity.memberships.create!(tenant: tenant, join_code: code)
|
|
identity.send_magic_link
|
|
end
|
|
|
|
session[:return_to_after_authenticating] = landing_url(script_name: "/#{tenant}")
|
|
redirect_to session_magic_link_path
|
|
end
|
|
|
|
private
|
|
def ensure_join_code_is_valid
|
|
head :not_found unless @join_code&.active?
|
|
end
|
|
|
|
def set_join_code
|
|
@join_code ||= ApplicationRecord.with_tenant(tenant) { Account::JoinCode.active.find_by(code: code) }
|
|
end
|
|
|
|
def tenant
|
|
params.expect(:tenant)
|
|
end
|
|
|
|
def code
|
|
params.expect(:code)
|
|
end
|
|
end
|