mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-15 19:52:01 +03:00
63546be1eb
Refs #3876 - Prevent signup page from flashing when an invalid invitation token is used. - Clear sensitive information from signup controller. - Make isInvitation API behavior consistent with other auth related APIs.
49 lines
1.7 KiB
JavaScript
49 lines
1.7 KiB
JavaScript
import ajax from 'ghost/utils/ajax';
|
|
import ValidationEngine from 'ghost/mixins/validation-engine';
|
|
|
|
var SignupController = Ember.ObjectController.extend(ValidationEngine, {
|
|
submitting: false,
|
|
|
|
// ValidationEngine settings
|
|
validationType: 'signup',
|
|
|
|
actions: {
|
|
signup: function () {
|
|
var self = this,
|
|
data = self.getProperties('name', 'email', 'password', 'token');
|
|
|
|
self.notifications.closePassive();
|
|
|
|
this.toggleProperty('submitting');
|
|
this.validate({ format: false }).then(function () {
|
|
ajax({
|
|
url: self.get('ghostPaths.url').api('authentication', 'invitation'),
|
|
type: 'POST',
|
|
dataType: 'json',
|
|
data: {
|
|
invitation: [{
|
|
name: data.name,
|
|
email: data.email,
|
|
password: data.password,
|
|
token: data.token
|
|
}]
|
|
}
|
|
}).then(function () {
|
|
self.get('session').authenticate('simple-auth-authenticator:oauth2-password-grant', {
|
|
identification: self.get('email'),
|
|
password: self.get('password')
|
|
});
|
|
}, function (resp) {
|
|
self.toggleProperty('submitting');
|
|
self.notifications.showAPIError(resp);
|
|
});
|
|
}, function (errors) {
|
|
self.toggleProperty('submitting');
|
|
self.notifications.showErrors(errors);
|
|
});
|
|
}
|
|
}
|
|
});
|
|
|
|
export default SignupController;
|