98 lines
2.6 KiB
Ruby
98 lines
2.6 KiB
Ruby
# auto_register: false
|
|
# frozen_string_literal: true
|
|
|
|
require "hanami/action"
|
|
|
|
module EuchreCamp
|
|
class Action < Hanami::Action
|
|
include Deps[
|
|
users_repo: 'repositories.users',
|
|
players_repo: 'repositories.players',
|
|
matches_repo: 'repositories.matches'
|
|
]
|
|
|
|
protected
|
|
|
|
# Get current user from session
|
|
def current_user(request)
|
|
user_id = request.session[:user_id]
|
|
return nil unless user_id
|
|
|
|
users_repo.by_id(user_id)
|
|
end
|
|
|
|
# Get current player from session
|
|
def current_player(request)
|
|
player_id = request.session[:player_id]
|
|
return nil unless player_id
|
|
|
|
players_repo.by_id(player_id)
|
|
end
|
|
|
|
# Check if user is logged in
|
|
def logged_in?(request)
|
|
!request.session[:user_id].nil?
|
|
end
|
|
|
|
# Require authentication - redirect to login if not logged in
|
|
def require_authentication(request, response)
|
|
unless logged_in?(request)
|
|
response.flash[:error] = 'Please login to continue'
|
|
response.redirect_to '/login'
|
|
end
|
|
end
|
|
|
|
# Require specific role
|
|
def require_role(request, response, *allowed_roles)
|
|
user = current_user(request)
|
|
return false unless user
|
|
|
|
unless allowed_roles.include?(user.role.to_sym)
|
|
response.flash[:error] = 'Access denied'
|
|
response.redirect_to '/rankings'
|
|
return false
|
|
end
|
|
|
|
true
|
|
end
|
|
|
|
# Check authorization for an action
|
|
def authorize(request, response, action, resource = nil, context = {})
|
|
user = current_user(request)
|
|
return false unless user
|
|
|
|
unless EuchreCamp::Services::Authorization.can?(user, action, resource, context)
|
|
response.flash[:error] = 'You do not have permission to perform this action'
|
|
response.redirect_to '/rankings'
|
|
return false
|
|
end
|
|
|
|
true
|
|
end
|
|
|
|
# Helper to pass current_player to view
|
|
def render_with_player(request, response, **options)
|
|
player = current_player(request)
|
|
response.render(view, current_player: player, **options)
|
|
end
|
|
|
|
# Get match and check if user can edit it
|
|
def get_editable_match(request, response, match_id)
|
|
match = matches_repo.by_id(match_id)
|
|
return nil unless match
|
|
|
|
user = current_user(request)
|
|
return match unless user
|
|
|
|
# Check if match is within 5 minutes for regular users
|
|
if EuchreCamp::Services::Authorization.can?(user, :edit_own_match_within_5_min, match)
|
|
match
|
|
else
|
|
response.flash[:error] = 'Match cannot be edited (too old or not your match)'
|
|
response.redirect_to '/admin/matches'
|
|
nil
|
|
end
|
|
end
|
|
end
|
|
end
|