2016-06-06 15:36:59 -04:00
|
|
|
require_dependency 'rate_limiter'
|
|
|
|
|
2013-02-05 14:16:51 -05:00
|
|
|
class InvitesController < ApplicationController
|
|
|
|
|
2017-02-13 16:19:41 -05:00
|
|
|
skip_before_filter :check_xhr, except: [:perform_accept_invitation]
|
|
|
|
skip_before_filter :preload_json, except: [:show]
|
2013-06-05 14:12:37 -04:00
|
|
|
skip_before_filter :redirect_to_login_if_required
|
|
|
|
|
2017-06-29 10:32:07 -04:00
|
|
|
before_filter :ensure_logged_in, only: [:destroy, :create, :create_invite_link, :rescind_all_invites, :resend_invite, :resend_all_invites, :upload_csv]
|
2017-07-07 20:24:39 -04:00
|
|
|
before_filter :ensure_new_registrations_allowed, only: [:show, :perform_accept_invitation]
|
|
|
|
before_filter :ensure_not_logged_in, only: [:show, :perform_accept_invitation]
|
2013-02-05 14:16:51 -05:00
|
|
|
|
|
|
|
def show
|
2017-01-24 15:15:29 -05:00
|
|
|
expires_now
|
2017-02-13 16:19:41 -05:00
|
|
|
|
|
|
|
invite = Invite.find_by(invite_key: params[:id])
|
|
|
|
|
|
|
|
if invite.present?
|
2017-07-27 21:20:09 -04:00
|
|
|
store_preloaded("invite_info", MultiJson.dump(
|
2017-02-13 16:19:41 -05:00
|
|
|
invited_by: UserNameSerializer.new(invite.invited_by, scope: guardian, root: false),
|
|
|
|
email: invite.email,
|
2017-07-27 21:20:09 -04:00
|
|
|
username: UserNameSuggester.suggest(invite.email))
|
|
|
|
)
|
|
|
|
|
2017-02-13 16:19:41 -05:00
|
|
|
render layout: 'application'
|
|
|
|
else
|
|
|
|
flash.now[:error] = I18n.t('invite.not_found')
|
|
|
|
render layout: 'no_ember'
|
|
|
|
end
|
2017-01-24 15:15:29 -05:00
|
|
|
end
|
|
|
|
|
|
|
|
def perform_accept_invitation
|
2017-05-29 03:45:01 -04:00
|
|
|
params.require(:id)
|
2017-06-08 15:10:43 -04:00
|
|
|
params.permit(:username, :name, :password, :user_custom_fields)
|
2014-05-06 09:41:59 -04:00
|
|
|
invite = Invite.find_by(invite_key: params[:id])
|
2013-02-05 14:16:51 -05:00
|
|
|
|
|
|
|
if invite.present?
|
2017-02-13 16:19:41 -05:00
|
|
|
begin
|
2017-06-08 15:10:43 -04:00
|
|
|
user = invite.redeem(username: params[:username], name: params[:name], password: params[:password], user_custom_fields: params[:user_custom_fields])
|
2017-02-13 16:19:41 -05:00
|
|
|
if user.present?
|
|
|
|
log_on_user(user)
|
2017-04-15 05:18:05 -04:00
|
|
|
post_process_invite(user)
|
2013-02-05 14:16:51 -05:00
|
|
|
end
|
|
|
|
|
2017-02-13 16:19:41 -05:00
|
|
|
topic = user.present? ? invite.topics.first : nil
|
|
|
|
|
|
|
|
render json: {
|
|
|
|
success: true,
|
|
|
|
redirect_to: topic.present? ? path("#{topic.relative_url}") : path("/")
|
|
|
|
}
|
|
|
|
rescue ActiveRecord::RecordInvalid, ActiveRecord::RecordNotSaved => e
|
|
|
|
render json: {
|
|
|
|
success: false,
|
|
|
|
errors: e.record&.errors&.to_hash || {}
|
|
|
|
}
|
|
|
|
end
|
2017-01-24 15:15:29 -05:00
|
|
|
else
|
2017-02-13 16:19:41 -05:00
|
|
|
render json: { success: false, message: I18n.t('invite.not_found') }
|
2017-01-24 15:15:29 -05:00
|
|
|
end
|
2013-02-05 14:16:51 -05:00
|
|
|
end
|
|
|
|
|
2013-11-06 12:56:26 -05:00
|
|
|
def create
|
|
|
|
params.require(:email)
|
|
|
|
|
2017-07-21 02:12:24 -04:00
|
|
|
groups = Group.lookup_groups(
|
|
|
|
group_ids: params[:group_ids],
|
|
|
|
group_names: params[:group_names]
|
|
|
|
)
|
2013-11-06 12:56:26 -05:00
|
|
|
|
2017-07-21 02:12:24 -04:00
|
|
|
guardian.ensure_can_invite_to_forum!(groups)
|
|
|
|
group_ids = groups.map(&:id)
|
2014-05-09 04:22:15 -04:00
|
|
|
|
2014-07-29 13:57:08 -04:00
|
|
|
invite_exists = Invite.where(email: params[:email], invited_by_id: current_user.id).first
|
2017-02-03 03:57:27 -05:00
|
|
|
if invite_exists && !guardian.can_send_multiple_invites?(current_user)
|
2017-02-03 05:05:33 -05:00
|
|
|
return render json: failed_json, status: 422
|
2014-07-29 13:57:08 -04:00
|
|
|
end
|
|
|
|
|
2015-12-14 11:02:23 -05:00
|
|
|
begin
|
2017-07-21 02:12:24 -04:00
|
|
|
if Invite.invite_by_email(params[:email], current_user, nil, group_ids, params[:custom_message])
|
2015-12-14 11:02:23 -05:00
|
|
|
render json: success_json
|
|
|
|
else
|
|
|
|
render json: failed_json, status: 422
|
|
|
|
end
|
2017-06-13 12:59:02 -04:00
|
|
|
rescue Invite::UserExists, ActiveRecord::RecordInvalid => e
|
2017-07-27 21:20:09 -04:00
|
|
|
render json: { errors: [e.message] }, status: 422
|
2013-11-06 12:56:26 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2015-08-25 21:41:52 -04:00
|
|
|
def create_invite_link
|
|
|
|
params.require(:email)
|
2017-07-21 02:12:24 -04:00
|
|
|
|
|
|
|
groups = Group.lookup_groups(
|
|
|
|
group_ids: params[:group_ids],
|
|
|
|
group_names: params[:group_names]
|
|
|
|
)
|
|
|
|
|
|
|
|
guardian.ensure_can_invite_to_forum!(groups)
|
2015-08-31 10:06:13 -04:00
|
|
|
topic = Topic.find_by(id: params[:topic_id])
|
2017-07-21 02:12:24 -04:00
|
|
|
group_ids = groups.map(&:id)
|
2015-08-25 21:41:52 -04:00
|
|
|
|
|
|
|
invite_exists = Invite.where(email: params[:email], invited_by_id: current_user.id).first
|
2017-02-03 03:57:27 -05:00
|
|
|
if invite_exists && !guardian.can_send_multiple_invites?(current_user)
|
2017-02-03 05:05:33 -05:00
|
|
|
return render json: failed_json, status: 422
|
2015-08-25 21:41:52 -04:00
|
|
|
end
|
|
|
|
|
2015-12-14 11:02:23 -05:00
|
|
|
begin
|
|
|
|
# generate invite link
|
|
|
|
if invite_link = Invite.generate_invite_link(params[:email], current_user, topic, group_ids)
|
|
|
|
render_json_dump(invite_link)
|
|
|
|
else
|
|
|
|
render json: failed_json, status: 422
|
|
|
|
end
|
|
|
|
rescue => e
|
2017-07-27 21:20:09 -04:00
|
|
|
render json: { errors: [e.message] }, status: 422
|
2015-09-16 07:57:32 -04:00
|
|
|
end
|
2015-08-25 21:41:52 -04:00
|
|
|
end
|
|
|
|
|
2013-02-05 14:16:51 -05:00
|
|
|
def destroy
|
2013-06-05 03:04:03 -04:00
|
|
|
params.require(:email)
|
2013-02-05 14:16:51 -05:00
|
|
|
|
2014-05-06 09:41:59 -04:00
|
|
|
invite = Invite.find_by(invited_by_id: current_user.id, email: params[:email])
|
2013-02-05 14:16:51 -05:00
|
|
|
raise Discourse::InvalidParameters.new(:email) if invite.blank?
|
2013-07-09 15:20:18 -04:00
|
|
|
invite.trash!(current_user)
|
2013-02-05 14:16:51 -05:00
|
|
|
|
|
|
|
render nothing: true
|
|
|
|
end
|
|
|
|
|
2017-06-29 10:32:07 -04:00
|
|
|
def rescind_all_invites
|
|
|
|
guardian.ensure_can_rescind_all_invites!(current_user)
|
|
|
|
|
|
|
|
Invite.rescind_all_invites_from(current_user)
|
|
|
|
render nothing: true
|
|
|
|
end
|
|
|
|
|
2014-10-06 14:48:56 -04:00
|
|
|
def resend_invite
|
|
|
|
params.require(:email)
|
2016-06-06 15:36:59 -04:00
|
|
|
RateLimiter.new(current_user, "resend-invite-per-hour", 10, 1.hour).performed!
|
2014-10-06 14:48:56 -04:00
|
|
|
|
|
|
|
invite = Invite.find_by(invited_by_id: current_user.id, email: params[:email])
|
|
|
|
raise Discourse::InvalidParameters.new(:email) if invite.blank?
|
|
|
|
invite.resend_invite
|
|
|
|
render nothing: true
|
2016-06-06 15:36:59 -04:00
|
|
|
|
|
|
|
rescue RateLimiter::LimitExceeded
|
|
|
|
render_json_error(I18n.t("rate_limiter.slow_down"))
|
2014-10-06 14:48:56 -04:00
|
|
|
end
|
|
|
|
|
2016-06-02 15:09:02 -04:00
|
|
|
def resend_all_invites
|
2016-06-07 01:27:08 -04:00
|
|
|
guardian.ensure_can_resend_all_invites!(current_user)
|
2016-06-02 15:09:02 -04:00
|
|
|
|
|
|
|
Invite.resend_all_invites_from(current_user.id)
|
|
|
|
render nothing: true
|
|
|
|
end
|
|
|
|
|
2016-12-04 11:06:35 -05:00
|
|
|
def upload_csv
|
2014-05-27 16:14:37 -04:00
|
|
|
guardian.ensure_can_bulk_invite_to_forum!(current_user)
|
|
|
|
|
2016-12-04 11:06:35 -05:00
|
|
|
file = params[:file] || params[:files].first
|
|
|
|
name = params[:name] || File.basename(file.original_filename, ".*")
|
|
|
|
extension = File.extname(file.original_filename)
|
|
|
|
|
|
|
|
Scheduler::Defer.later("Upload CSV") do
|
|
|
|
begin
|
2017-01-11 05:45:02 -05:00
|
|
|
data = if extension.downcase == ".csv"
|
2016-12-04 11:06:35 -05:00
|
|
|
path = Invite.create_csv(file, name)
|
2017-01-11 05:45:02 -05:00
|
|
|
Jobs.enqueue(:bulk_invite, filename: "#{name}#{extension}", current_user_id: current_user.id)
|
2017-07-27 21:20:09 -04:00
|
|
|
{ url: path }
|
2016-12-04 11:06:35 -05:00
|
|
|
else
|
|
|
|
failed_json.merge(errors: [I18n.t("bulk_invite.file_should_be_csv")])
|
|
|
|
end
|
|
|
|
rescue
|
|
|
|
failed_json.merge(errors: [I18n.t("bulk_invite.error")])
|
|
|
|
end
|
|
|
|
MessageBus.publish("/uploads/csv", data.as_json, user_ids: [current_user.id])
|
2014-05-27 16:14:37 -04:00
|
|
|
end
|
|
|
|
|
2016-12-04 11:06:35 -05:00
|
|
|
render json: success_json
|
2014-05-27 16:14:37 -04:00
|
|
|
end
|
|
|
|
|
2014-07-14 11:56:26 -04:00
|
|
|
def fetch_username
|
|
|
|
params.require(:username)
|
|
|
|
params[:username]
|
|
|
|
end
|
|
|
|
|
|
|
|
def fetch_email
|
|
|
|
params.require(:email)
|
|
|
|
params[:email]
|
|
|
|
end
|
|
|
|
|
2014-07-14 15:42:14 -04:00
|
|
|
def ensure_new_registrations_allowed
|
|
|
|
unless SiteSetting.allow_new_registrations
|
|
|
|
flash[:error] = I18n.t('login.new_registrations_disabled')
|
2015-01-15 15:56:53 -05:00
|
|
|
render layout: 'no_ember'
|
2014-07-14 15:42:14 -04:00
|
|
|
false
|
|
|
|
end
|
|
|
|
end
|
2016-02-23 08:33:12 -05:00
|
|
|
|
|
|
|
def ensure_not_logged_in
|
|
|
|
if current_user
|
|
|
|
flash[:error] = I18n.t("login.already_logged_in", current_user: current_user.username)
|
|
|
|
render layout: 'no_ember'
|
|
|
|
false
|
|
|
|
end
|
|
|
|
end
|
2017-04-15 05:18:05 -04:00
|
|
|
|
|
|
|
private
|
|
|
|
|
|
|
|
def post_process_invite(user)
|
|
|
|
user.enqueue_welcome_message('welcome_invite') if user.send_welcome_message
|
|
|
|
if user.has_password?
|
|
|
|
email_token = user.email_tokens.create(email: user.email)
|
|
|
|
Jobs.enqueue(:critical_user_email, type: :signup, user_id: user.id, email_token: email_token.token)
|
2017-04-18 04:55:52 -04:00
|
|
|
elsif !SiteSetting.enable_sso && SiteSetting.enable_local_logins
|
|
|
|
Jobs.enqueue(:invite_password_instructions_email, username: user.username)
|
2017-04-15 05:18:05 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2013-02-05 14:16:51 -05:00
|
|
|
end
|