Packages

phoenix

1.8.6
1.8.9 1.8.8 1.8.7 1.8.6 1.8.5 1.8.4 1.8.3 1.8.2 1.8.1 1.8.0 1.8.0-rc.4 1.8.0-rc.3 1.8.0-rc.2 1.8.0-rc.1 1.8.0-rc.0 1.7.24 1.7.23 1.7.22 1.7.21 1.7.20 1.7.19 1.7.18 1.7.17 1.7.16 1.7.15 1.7.14 1.7.13 1.7.12 1.7.11 1.7.10 1.7.9 1.7.8 1.7.7 1.7.6 1.7.5 1.7.4 1.7.3 1.7.2 1.7.1 1.7.0 1.7.0-rc.3 1.7.0-rc.2 1.7.0-rc.1 1.7.0-rc.0 1.6.17 1.6.16 1.6.15 1.6.14 1.6.13 1.6.12 1.6.11 1.6.10 1.6.9 1.6.8 1.6.7 1.6.6 1.6.5 1.6.4 1.6.3 1.6.2 1.6.1 1.6.0 1.6.0-rc.1 1.6.0-rc.0 1.5.15 1.5.14 1.5.13 1.5.12 1.5.11 1.5.10 1.5.9 1.5.8 1.5.7 1.5.6 1.5.5 1.5.4 1.5.3 1.5.2 1.5.1 1.5.0 1.5.0-rc.0 1.4.18 1.4.17 1.4.16 1.4.15 1.4.14 1.4.13 1.4.12 1.4.11 1.4.10 1.4.9 1.4.8 1.4.7 1.4.6 1.4.5 1.4.4 1.4.3 1.4.2 1.4.1 1.4.0 1.4.0-rc.3 1.4.0-rc.2 1.4.0-rc.1 1.4.0-rc.0 1.3.5 1.3.4 1.3.3 1.3.2 1.3.1 1.3.0 1.3.0-rc.3 1.3.0-rc.2 1.3.0-rc.1 1.3.0-rc.0 1.2.5 1.2.4 1.2.3 1.2.2 1.2.1 1.2.0 1.2.0-rc.1 1.2.0-rc.0 1.1.9 1.1.8 1.1.7 1.1.6 1.1.5 1.1.4 1.1.3 1.1.2 1.1.1 1.1.0 1.0.6 1.0.5 1.0.4 1.0.3 1.0.2 1.0.1 1.0.0 0.17.1 0.17.0 0.16.1 0.16.0 0.15.0 0.14.0 0.13.1 0.13.0 0.12.0 0.11.0 0.10.0 0.9.0 0.8.0 0.7.2 0.7.1 0.7.0 0.6.2 0.6.1 0.6.0 0.5.0 0.4.1 0.4.0 0.3.1 0.3.0 0.2.11 0.2.10 0.2.9 0.2.8 0.2.7 0.2.6 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.0

Productive. Reliable. Fast. A productive web framework that does not compromise speed or maintainability.

Security advisory: This version has known vulnerabilities. View advisories
HexDocs

Current section

Files

Jump to
Readme
176 Versions
10 Dependencies
Dependants
5 Advisories
Files
Activity
phoenix priv templates phx.gen.auth session_controller.ex.eex
Raw

priv/templates/phx.gen.auth/session_controller.ex.eex 

defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web_namespace, schema.alias) %>SessionController do

  use <%= inspect context.web_module %>, :controller



  alias <%= inspect context.module %>

  alias <%= inspect auth_module %><%= if live? do %>



  def create(conn, %{"_action" => "confirmed"} = params) do

    create(conn, params, "<%= schema.human_singular %> confirmed successfully.")

  end



  def create(conn, params) do

    create(conn, params, "Welcome back!")

  end



  # magic link login

  defp create(conn, %{"<%= schema.singular %>" => %{"token" => token} = <%= schema.singular %>_params}, info) do

    case <%= inspect context.alias %>.login_<%= schema.singular %>_by_magic_link(token) do

      {:ok, {<%= schema.singular %>, tokens_to_disconnect}} ->

        <%= inspect schema.alias %>Auth.disconnect_sessions(tokens_to_disconnect)



        conn

        |> put_flash(:info, info)

        |> <%= inspect schema.alias %>Auth.log_in_<%= schema.singular %>(<%= schema.singular %>, <%= schema.singular %>_params)



      _ ->

        conn

        |> put_flash(:error, "The link is invalid or it has expired.")

        |> redirect(to: ~p"<%= schema.route_prefix %>/log-in")

    end

  end



  # email + password login

  defp create(conn, %{"<%= schema.singular %>" => <%= schema.singular %>_params}, info) do

    %{"email" => email, "password" => password} = <%= schema.singular %>_params



    if <%= schema.singular %> = <%= inspect context.alias %>.get_<%= schema.singular %>_by_email_and_password(email, password) do

      conn

      |> put_flash(:info, info)

      |> <%= inspect schema.alias %>Auth.log_in_<%= schema.singular %>(<%= schema.singular %>, <%= schema.singular %>_params)

    else

      # In order to prevent user enumeration attacks, don't disclose whether the email is registered.

      conn

      |> put_flash(:error, "Invalid email or password")

      |> put_flash(:email, String.slice(email, 0, 160))

      |> redirect(to: ~p"<%= schema.route_prefix %>/log-in")

    end

  end



  def update_password(conn, %{"<%= schema.singular %>" => <%= schema.singular %>_params} = params) do

    <%= schema.singular %> = conn.assigns.<%= scope_config.scope.assign_key %>.<%= schema.singular %>

    true = <%= inspect context.alias %>.sudo_mode?(<%= schema.singular %>)

    {:ok, {_<%= schema.singular %>, expired_tokens}} = <%= inspect context.alias %>.update_<%= schema.singular %>_password(<%= schema.singular %>, <%= schema.singular %>_params)



    # disconnect all existing LiveViews with old sessions

    <%= inspect schema.alias %>Auth.disconnect_sessions(expired_tokens)



    conn

    |> put_session(:<%= schema.singular %>_return_to, ~p"<%= schema.route_prefix %>/settings")

    |> create(params, "Password updated successfully!")

  end<% else %>



  def new(conn, _params) do

    email = get_in(conn.assigns, [:<%= scope_config.scope.assign_key %>, Access.key(:<%= schema.singular %>), Access.key(:email)])

    form = Phoenix.Component.to_form(%{"email" => email}, as: "<%= schema.singular %>")



    render(conn, :new, form: form)

  end



  # magic link login

  def create(conn, %{"<%= schema.singular %>" => %{"token" => token} = <%= schema.singular %>_params} = params) do

    info =

      case params do

        %{"_action" => "confirmed"} -> "<%= schema.human_singular %> confirmed successfully."

        _ -> "Welcome back!"

      end



    case <%= inspect context.alias %>.login_<%= schema.singular %>_by_magic_link(token) do

      {:ok, {<%= schema.singular %>, _expired_tokens}} ->

        conn

        |> put_flash(:info, info)

        |> <%= inspect schema.alias %>Auth.log_in_<%= schema.singular %>(<%= schema.singular %>, <%= schema.singular %>_params)



      {:error, :not_found} ->

        conn

        |> put_flash(:error, "The link is invalid or it has expired.")

        |> render(:new, form: Phoenix.Component.to_form(%{}, as: "<%= schema.singular %>"))

    end

  end



  # email + password login

  def create(conn, %{"<%= schema.singular %>" => %{"email" => email, "password" => password} = <%= schema.singular %>_params}) do

    if <%= schema.singular %> = <%= inspect context.alias %>.get_<%= schema.singular %>_by_email_and_password(email, password) do

      conn

      |> put_flash(:info, "Welcome back!")

      |> <%= inspect schema.alias %>Auth.log_in_<%= schema.singular %>(<%= schema.singular %>, <%= schema.singular %>_params)

    else

      form = Phoenix.Component.to_form(<%= schema.singular %>_params, as: "<%= schema.singular %>")



      # In order to prevent user enumeration attacks, don't disclose whether the email is registered.

      conn

      |> put_flash(:error, "Invalid email or password")

      |> render(:new, form: form)

    end

  end



  # magic link request

  def create(conn, %{"<%= schema.singular %>" => %{"email" => email}}) do

    if <%= schema.singular %> = <%= inspect context.alias %>.get_<%= schema.singular %>_by_email(email) do

      <%= inspect context.alias %>.deliver_login_instructions(

        <%= schema.singular %>,

        &url(~p"<%= schema.route_prefix %>/log-in/#{&1}")

      )

    end



    info =

      "If your email is in our system, you will receive instructions for logging in shortly."



    conn

    |> put_flash(:info, info)

    |> redirect(to: ~p"<%= schema.route_prefix %>/log-in")

  end



  def confirm(conn, %{"token" => token}) do

    if <%= schema.singular %> = <%= inspect context.alias %>.get_<%= schema.singular %>_by_magic_link_token(token) do

      form = Phoenix.Component.to_form(%{"token" => token}, as: "<%= schema.singular %>")



      conn

      |> assign(:<%= schema.singular %>, <%= schema.singular %>)

      |> assign(:form, form)

      |> render(:confirm)

    else

      conn

      |> put_flash(:error, "Magic link is invalid or it has expired.")

      |> redirect(to: ~p"<%= schema.route_prefix %>/log-in")

    end

  end<% end %>



  def delete(conn, _params) do

    conn

    |> put_flash(:info, "Logged out successfully.")

    |> <%= inspect schema.alias %>Auth.log_out_<%= schema.singular %>()

  end

end