def require_capability(cap)
# when the current token is nil, it means the user logged in with a different
# method, otherwise an OAuth token was used, which has to be checked.
- unless @current_token.nil?
- unless @current_token.read_attribute(cap)
+ unless current_token.nil?
+ unless current_token.read_attribute(cap)
render :text => "OAuth token doesn't have that capability.", :status => :forbidden
return false
end
def setup_user_auth
# try and setup using OAuth
if oauthenticate
- @user = @current_token.user
+ @user = current_token.user
else
username, passwd = get_auth_data # parse from headers
# authenticate per-scheme
end
def set_locale
+ response.header['Vary'] = 'Accept-Language'
+
if @user
if !@user.languages.empty?
request.user_preferred_languages = @user.languages
+ response.header['Vary'] = '*'
elsif !request.user_preferred_languages.empty?
@user.languages = request.user_preferred_languages
@user.save