Changeset 461 for web

Timestamp:

07/30/12 01:04:24 (12 years ago)

Author:

nanardon

Message:

confirm subscription by mail

Account are not immediatelly created, the request is stored and validation code
is sent by mail

Location:

web

Files:

• Makefile.PL (modified) (1 diff)
• Sophie.spec.in (modified) (1 diff)
• lib/Sophie.pm (modified) (1 diff)
• lib/Sophie/Controller/Login.pm (modified) (3 diffs)
• lib/Sophie/View/Email.pm (added)
• root/templates/html/login/confirm.html (added)
• root/templates/html/login/create.tt (modified) (1 diff)
• t/view_Email.t (added)

web/Makefile.PL

@@ -31 +31 @@
 requires 'Catalyst::View::JSON' => '0';
 requires 'Catalyst::View::GD' => '0';
+requires 'Catalyst::View::Email' => '0';
 requires 'Catalyst::Model::DBIC::Schema';
 requires 'Catalyst::Authentication::Store::DBIx::Class';

web/Sophie.spec.in

@@ -54 +54 @@
 Requires: perl(Catalyst::View::JSON)
 Requires: perl(Catalyst::View::GD)
+Requires: perl(Catalyst::View::Email)
 Requires: perl(Catalyst::Plugin::Compress::Zlib)
 Requires: perl-Catalyst-Plugin-Server

web/lib/Sophie.pm

@@ -79 +79 @@
         },
     },
+    'View::Email' => {
+        default => {
+            charset => 'utf-8',
+            content_type => 'text/plain',
+        },
+        sender => {
+            mailer => 'SMTP',
+            mailer_args => {
+                host => 'localhost',
+            },
+        },
+    }
 );
 

web/lib/Sophie/Controller/Login.pm

@@ -56 +56 @@
     my ($self, $c, $mail) = @_;
 
-    my $valid_code = join('', map { printf("%02x", rand(256)) } (0 .. 15));
+    my $valid_code = join('', map { sprintf("%02x", rand(256)) } (0 .. 15));
 
     $c->model('Base::AccountRequest')->create({
             mail => $mail,
             valid_code => $valid_code,
+            ip_address => $c->req->address,
     });
+    $c->model('Base')->storage->dbh->commit;
+
+    return $valid_code;
 }
 
@@ -67 +71 @@
     my ($self, $c) = @_;
 
-    warn $c->req->param('valid');
-    warn $c->session->{valid_create_user};
     if ((my $valid = $c->req->param('valid')) && $c->req->param('username')) {
+       # create a login request
+       my $valid_code = $c->forward('create_request', [ $c->req->param('username') ],);
+
        if ($valid == $c->session->{valid_create_user}) {
-           my $res = $c->forward('/admin/create_user',
-               [
-                   $c->req->param('username'),
-                   $c->req->param('password'),
-               ]
-            );
-            if ($res) {
-               $c->res->redirect($c->uri_for('/login',
-                   { username => $c->req->param('username') }
-               ));
-           }
-       }
+           $c->stash->{email} = {
+               header => [
+                   to      => $c->req->param('username'),
+                   from    => 'sophie@zarb.org',
+                   subject => 'Sophie.zarb.org confirm request',
+               ],
+               body    => "
+Someone, hopefully you, request an account on Sophe web site.
+
+To complete your subscription follow the link bellow:
+
+" . $c->uri_for('/login/confirm', { id => $valid_code }) . "
+
+If this is an error, simply ignore this mail.
+
+",
+           };
+           $c->forward( $c->view('Email') );
+        }
     }
     my $aa = (0 .. 9)[rand(9)];
@@ -88 +100 @@
     $c->stash->{valid} = "$aa + $bb";
     $c->session->{valid_create_user} = $aa + $bb;
+}
+
+sub confirm :Local {
+    my ($self, $c) = @_;
+
+    my $reqid = $c->req->param('id');
+
+    my $request = $c->model('Base::AccountRequest')->find(
+        {
+            valid_code => $reqid,
+        });
+    if (!$request) {
+        # ERR
+    }
+    $c->stash->{email} = $request->mail;
+
+    if ($c->req->param('password')) {
+       my $res = $c->forward('/admin/create_user',
+           [
+               $request->mail,
+               $c->req->param('password'),
+           ]
+        );
+        if ($res) {
+           $request->delete;
+           $c->model('Base')->storage->dbh->commit;
+           # TODO authenticate user directly
+           $c->res->redirect($c->uri_for('/login',
+               { username => $request->mail }
+           ));
+       }
+    }
 }
 

web/root/templates/html/login/create.tt

@@ -6 +6 @@
     <label for="username">Email:</label>
         <input type="text" id="username" name="username" value="[% c.req.param('username') %]"><br>
-    <label for="password">Password:</label> <input id="password" type="password" name="password"><br>
     <p>Please enter the result of:</p>
     <label for="valid">[% valid | html %]:</label>