Mike Dalessio
d41d50d52b
and some other de-tenant changes, including removing the controller tenanting concerns
28 lines
660 B
Ruby
28 lines
660 B
Ruby
class Memberships::EmailAddresses::ConfirmationsController < ApplicationController
|
|
allow_unauthenticated_access
|
|
|
|
before_action :set_membership
|
|
rate_limit to: 5, within: 1.hour, only: :create
|
|
|
|
def show
|
|
end
|
|
|
|
def create
|
|
membership = Membership.change_email_address_using_token(token)
|
|
|
|
terminate_session if Current.session
|
|
start_new_session_for membership.reload.identity
|
|
|
|
redirect_to edit_user_url(script_name: "/#{@membership.tenant}", id: @membership.user)
|
|
end
|
|
|
|
private
|
|
def set_membership
|
|
@membership = Membership.find(params[:membership_id])
|
|
end
|
|
|
|
def token
|
|
params.expect :email_address_token
|
|
end
|
|
end
|