X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/c162c065c6f6db5dc584599f5639b296b627a165..bf9dd8f350ca1b54afb79dda79506d980ccb5738:/app/controllers/users_controller.rb diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index 8c234006e..514b3f8ee 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -269,7 +269,7 @@ class UsersController < ApplicationController def logout @title = t "users.logout.title" - if params[:session] == session.id + if request.post? if session[:token] token = UserToken.find_by(:token => session[:token]) token&.destroy @@ -376,7 +376,7 @@ class UsersController < ApplicationController @user = User.find_by(:display_name => params[:display_name]) if @user && - (@user.visible? || (current_user&.administrator?)) + (@user.visible? || current_user&.administrator?) @title = @user.display_name else render_unknown_user params[:display_name] @@ -520,11 +520,11 @@ class UsersController < ApplicationController if user case user.status - when "pending" then + when "pending" unconfirmed_login(user) - when "active", "confirmed" then + when "active", "confirmed" successful_login(user, request.env["omniauth.params"]["referer"]) - when "suspended" then + when "suspended" failed_login t("users.login.account is suspended", :webmaster => "mailto:#{Settings.support_email}").html_safe else failed_login t("users.login.auth failure") @@ -665,10 +665,10 @@ class UsersController < ApplicationController user.avatar.attach(params[:user][:avatar]) user.image_use_gravatar = false when "delete" then - user.avatar.purge + user.avatar.purge_later user.image_use_gravatar = false when "gravatar" then - user.avatar.purge + user.avatar.purge_later user.image_use_gravatar = true end @@ -779,7 +779,7 @@ class UsersController < ApplicationController # check if this user has a gravatar and set the user pref is true def gravatar_enable(user) # code from example https://en.gravatar.com/site/implement/images/ruby/ - return false if user.image.present? + return false if user.avatar.attached? hash = Digest::MD5.hexdigest(user.email.downcase) url = "https://www.gravatar.com/avatar/#{hash}?d=404" # without d=404 we will always get an image back