mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-11-29 15:12:58 +03:00
cf7a763199
refs https://github.com/TryGhost/Admin/pull/1901 Ember has deprecated mixins in preparation for 4.0 and `ember-simple-auth` has now done the same in 3.1.0. - removed all imports of Ember Simple Auth mixins - moved authenticated and invalidated handling from application route to session service - moved server-notification loading from application route to session service - updated `AuthenticatedRoute` to use the session service directly rather than authenticated route mixin - added `UnauthenticatedRoute` that incorporates the behaviour from our overridden `UnauthenticatedRouteMixin` and switches to using the session service directly
85 lines
3.1 KiB
JavaScript
85 lines
3.1 KiB
JavaScript
// TODO: remove usage of Ember Data's private `Errors` class when refactoring validations
|
|
// eslint-disable-next-line
|
|
import DS from 'ember-data';
|
|
import EmberObject from '@ember/object';
|
|
import RSVP from 'rsvp';
|
|
import UnauthenticatedRoute from 'ghost-admin/routes/unauthenticated';
|
|
import ValidationEngine from 'ghost-admin/mixins/validation-engine';
|
|
import {inject as service} from '@ember/service';
|
|
|
|
const {Promise} = RSVP;
|
|
const {Errors} = DS;
|
|
|
|
export default UnauthenticatedRoute.extend({
|
|
ghostPaths: service(),
|
|
notifications: service(),
|
|
session: service(),
|
|
ajax: service(),
|
|
config: service(),
|
|
|
|
beforeModel() {
|
|
if (this.get('session.isAuthenticated')) {
|
|
this.notifications.showAlert('You need to sign out to register as a new user.', {type: 'warn', delayed: true, key: 'signup.create.already-authenticated'});
|
|
}
|
|
|
|
this._super(...arguments);
|
|
},
|
|
|
|
model(params) {
|
|
let SignupDetails = EmberObject.extend(ValidationEngine, {
|
|
validationType: 'signup'
|
|
});
|
|
let signupDetails = SignupDetails.create();
|
|
let re = /^(?:[A-Za-z0-9_-]{4})*(?:[A-Za-z0-9_-]{2}|[A-Za-z0-9_-]{3})?$/;
|
|
let email,
|
|
tokenText;
|
|
|
|
return new Promise((resolve) => {
|
|
if (!re.test(params.token)) {
|
|
this.notifications.showAlert('Invalid token.', {type: 'error', delayed: true, key: 'signup.create.invalid-token'});
|
|
|
|
return resolve(this.transitionTo('signin'));
|
|
}
|
|
|
|
tokenText = atob(params.token);
|
|
email = tokenText.split('|')[1];
|
|
|
|
// leave e-mail blank even though we get it from the token because
|
|
// we need the user to type it in for Chrome to remember the
|
|
// email/password combo properly
|
|
signupDetails.set('email', '');
|
|
signupDetails.set('token', params.token);
|
|
signupDetails.set('errors', Errors.create());
|
|
|
|
let authUrl = this.get('ghostPaths.url').api('authentication', 'invitation');
|
|
|
|
return this.ajax.request(authUrl, {
|
|
dataType: 'json',
|
|
data: {
|
|
email
|
|
}
|
|
}).then((response) => {
|
|
if (response && response.invitation && response.invitation[0].valid === false) {
|
|
this.notifications.showAlert('The invitation does not exist or is no longer valid.', {type: 'warn', delayed: true, key: 'signup.create.invalid-invitation'});
|
|
|
|
return resolve(this.transitionTo('signin'));
|
|
}
|
|
|
|
// set blogTitle, so password validation has access to it
|
|
signupDetails.set('blogTitle', this.get('config.blogTitle'));
|
|
|
|
resolve(signupDetails);
|
|
}).catch(() => {
|
|
resolve(signupDetails);
|
|
});
|
|
});
|
|
},
|
|
|
|
deactivate() {
|
|
this._super(...arguments);
|
|
|
|
// clear the properties that hold the sensitive data from the controller
|
|
this.controllerFor('signup').get('signupDetails').setProperties({email: '', password: '', token: ''});
|
|
}
|
|
});
|