pages_core 3.13.0 → 3.14.0

data/app/controllers/admin/password_resets_controller.rb

@@ -1,85 +0,0 @@
-# frozen_string_literal: true
-
-module Admin
-  class PasswordResetsController < Admin::AdminController
-    before_action :find_password_reset_token, only: %i[show update]
-    before_action :check_for_expired_token, only: %i[show update]
-    before_action :require_authentication, except: %i[create show update]
-
-    layout "admin"
-
-    def show
-      @user = @password_reset_token.user
-    end
-
-    def create
-      @user = find_user_by_email(params[:email])
-      if @user
-        @password_reset_token = @user.password_reset_tokens.create
-        deliver_password_reset(@user, @password_reset_token)
-        flash[:notice] = t("pages_core.password_reset.sent")
-      else
-        flash[:notice] = t("pages_core.password_reset.not_found")
-      end
-      redirect_to login_admin_users_url
-    end
-
-    def update
-      @user = @password_reset_token.user
-      if user_params[:password].present? && @user.update(user_params)
-        @password_reset_token.destroy
-        authenticate!(@user)
-        flash[:notice] = t("pages_core.password_reset.changed")
-        redirect_to login_admin_users_url
-      else
-        render action: :show
-      end
-    end
-
-    private
-
-    def deliver_password_reset(user, password_reset)
-      AdminMailer.password_reset(
-        user,
-        admin_password_reset_with_token_url(
-          password_reset, password_reset.token
-        )
-      ).deliver_later
-    end
-
-    def find_user_by_email(email)
-      return unless email
-
-      User.find_by_email(params[:email])
-    end
-
-    def user_params
-      params.require(:user).permit(:password, :confirm_password)
-    end
-
-    def valid_token?(reset)
-      reset && secure_compare(reset.token, params[:token])
-    end
-
-    def find_password_reset_token
-      @password_reset_token = begin
-        PasswordResetToken.find(params[:id])
-      rescue ActiveRecord::RecordNotFound
-        nil
-      end
-
-      return if valid_token?(@password_reset_token)
-
-      flash[:notice] = t("pages_core.password_reset.invalid_request")
-      redirect_to(login_admin_users_url) && return
-    end
-
-    def check_for_expired_token
-      return unless @password_reset_token.expired?
-
-      @password_reset_token.destroy
-      flash[:notice] = t("pages_core.password_reset.expired")
-      redirect_to(login_admin_users_url)
-    end
-  end
-end

data/app/controllers/sessions_controller.rb

@@ -1,27 +0,0 @@
-# frozen_string_literal: true
-
-class SessionsController < ApplicationController
-  def create
-    user = find_user(params[:email], params[:password])
-    authenticate!(user) if user
-
-    if logged_in?
-      redirect_to admin_default_url
-    else
-      flash[:notice] = t("pages_core.invalid_login")
-      redirect_to login_admin_users_url
-    end
-  end
-
-  def destroy
-    flash[:notice] = t("pages_core.logged_out")
-    deauthenticate!
-    redirect_to login_admin_users_url
-  end
-
-  protected
-
-  def find_user(email, password)
-    User.authenticate(email, password:) if email && password
-  end
-end

data/app/javascript/controllers/LoginController.ts

@@ -1,32 +0,0 @@
-import { Controller } from "@hotwired/stimulus";
-
-export default class LoginController extends Controller {
-  declare readonly tabTargets: HTMLDivElement[];
-
-  static get targets() {
-    return ["tab"];
-  }
-
-  connect() {
-    if (this.tabTargets.length > 0) {
-      this.showTab(this.tabTargets[0].dataset.tab);
-    }
-  }
-
-  changeTab(evt: Event) {
-    evt.preventDefault();
-    if ("dataset" in evt.target && "tab" in evt.target.dataset) {
-      this.showTab(evt.target.dataset.tab);
-    }
-  }
-
-  showTab(tab: string) {
-    this.tabTargets.forEach((t) => {
-      if (t.dataset.tab == tab) {
-        t.classList.remove("hidden");
-      } else {
-        t.classList.add("hidden");
-      }
-    });
-  }
-}

data/app/models/password_reset_token.rb

@@ -1,34 +0,0 @@
-# frozen_string_literal: true
-
-class PasswordResetToken < ApplicationRecord
-  belongs_to :user
-  before_create :ensure_token
-  before_create :ensure_expiration
-
-  scope :active,  -> { where("expires_at >= ?", Time.now.utc) }
-  scope :expired, -> { where("expires_at < ?", Time.now.utc) }
-
-  class << self
-    def default_expiration
-      24.hours
-    end
-
-    def expire!
-      expired.delete_all
-    end
-  end
-
-  def expired?
-    expires_at < Time.now.utc
-  end
-
-  private
-
-  def ensure_expiration
-    self.expires_at ||= Time.now.utc + self.class.default_expiration
-  end
-
-  def ensure_token
-    self.token ||= SecureRandom.hex(32)
-  end
-end

data/app/views/admin/password_resets/show.html.erb

@@ -1,21 +0,0 @@
-<% content_for :page_title, "Reset password" %>
-<% content_for :page_description, "Please choose a new password to proceed" %>
-<% content_for :body_class, "login" %>
-
-<div class="login-form">
-  <%= form_for(@user,
-               url: admin_password_reset_path(@password_reset_token, token: @password_reset_token.token),
-               builder: PagesCore::Admin::FormBuilder,
-               class: 'form') do |f| %>
-    <%= f.labelled_password_field(:password,
-                                  autocomplete: "new-password") %>
-    <%= f.labelled_password_field(:confirm_password,
-                                  autocomplete: "new-password") %>
-    <p>
-      <button type="submit">
-        Change Password
-      </button>
-      or <%= link_to "Return to login screen", login_admin_users_path %>
-    </p>
-  <% end %>
-</div>

data/app/views/admin/users/login.html.erb

@@ -1,65 +0,0 @@
-<% content_for :page_title, "Sign in" %>
-<% content_for(:page_description,
-               "Please enter your email address and password to sign in") %>
-<% content_for :body_class, "login" %>
-
-<% content_for :sidebar do %>
-  <h2>Please note</h2>
-  <p>
-    Please contact support if you experience problems logging in or using Pages.
-  </p>
-<% end %>
-
-<div class="login-form"
-     data-controller="login">
-  <div class="login-tab password"
-       data-login-target="tab"
-       data-tab="password">
-    <%= form_tag session_path do %>
-      <p>
-        <label>Email address</label>
-        <%= text_field_tag(:email, "", autocomplete: "email") %>
-      </p>
-      <p>
-        <label>Password</label>
-        <%= password_field_tag(:password, "", autocomplete: "current-password") %>
-      </p>
-      <p>
-        <button type="submit">Sign in</button>
-      </p>
-      <ul>
-        <li>
-          <%= link_to("<b>Help!</b> I forgot my password!".html_safe,
-                      login_admin_users_path,
-                      data: {
-                        action: "click->login#changeTab",
-                        tab: "password-reset"
-          }) %>
-        </li>
-      </ul>
-    <% end %>
-  </div>
-
-  <div class="login-tab password-reset"
-       data-login-target="tab"
-       data-tab="password-reset">
-    <%= form_tag admin_password_resets_path do %>
-      <h2>
-        Forgot your password?
-      </h2>
-      <p>
-        Don't worry, it happens.
-        Enter your email address below,
-        and we'll send you a link where you can reset your password.
-      </p>
-      <p>
-        <%= text_field_tag(:email, "", autocomplete: "email") %>
-      </p>
-      <p>
-        <button type="submit">
-          Send
-        </button>
-      </p>
-    <% end %>
-  </div>
-</div>

data/app/views/admin_mailer/password_reset.text.erb

@@ -1,11 +0,0 @@
-Hi, <%= @user.name %>!
-
-We've received a request to reset the password for your account on <%= PagesCore.config(:site_name) %>.
-
-If you want to reset your password, please click the following link:
-
-<%= @url %>
-
-This will take you to a web page where you can set a new password of your choosing. The link will expire in 24 hours.
-
-If you do not want to change your password, please ignore this email.