X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/53aa7259bb0612eb48a17d0b954ad71ea37d87a4..558c8765f546d7f13c2417275ccae847247a9d95:/app/controllers/sessions_controller.rb?ds=inline diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb index 5b46d67d0..e57ffc06a 100644 --- a/app/controllers/sessions_controller.rb +++ b/app/controllers/sessions_controller.rb @@ -20,29 +20,20 @@ class SessionsController < ApplicationController def create session[:remember_me] ||= params[:remember_me] session[:referer] = safe_referer(params[:referer]) if params[:referer] - password_authentication(params[:username], params[:password]) + password_authentication(params[:username].strip, params[:password]) end def destroy - @title = t "sessions.destroy.title" + @title = t ".title" if request.post? - if session[:token] - token = UserToken.find_by(:token => session[:token]) - token&.destroy - session.delete(:token) - end - + session.delete(:pending_user) session.delete(:user) session_expires_automatically referer = safe_referer(params[:referer]) if params[:referer] - if referer - redirect_to referer - else - redirect_to :controller => "site", :action => "index" - end + redirect_to referer || { :controller => "site", :action => "index" } end end @@ -56,7 +47,7 @@ class SessionsController < ApplicationController elsif (user = User.authenticate(:username => username, :password => password, :pending => true)) unconfirmed_login(user) elsif User.authenticate(:username => username, :password => password, :suspended => true) - failed_login t("sessions.new.account is suspended", :webmaster => "mailto:#{Settings.support_email}").html_safe, username + failed_login({ :partial => "sessions/suspended_flash" }, username) else failed_login t("sessions.new.auth failure"), username end