2019-09-02 14:29:19 +03:00
|
|
|
defmodule PlausibleWeb.AuthController do
|
|
|
|
use PlausibleWeb, :controller
|
|
|
|
use Plausible.Repo
|
|
|
|
alias Plausible.Auth
|
|
|
|
require Logger
|
|
|
|
|
2020-06-08 10:35:13 +03:00
|
|
|
plug PlausibleWeb.RequireLoggedOutPlug
|
|
|
|
when action in [:register_form, :register, :login_form, :login]
|
|
|
|
|
|
|
|
plug PlausibleWeb.RequireAccountPlug
|
|
|
|
when action in [:user_settings, :save_settings, :delete_me, :password_form, :set_password]
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
def register_form(conn, _params) do
|
|
|
|
changeset = Plausible.Auth.User.changeset(%Plausible.Auth.User{})
|
2020-06-08 10:35:13 +03:00
|
|
|
|
|
|
|
render(conn, "register_form.html",
|
|
|
|
changeset: changeset,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
|
|
|
|
def register(conn, %{"user" => params}) do
|
|
|
|
user = Plausible.Auth.User.changeset(%Plausible.Auth.User{}, params)
|
|
|
|
|
|
|
|
case Ecto.Changeset.apply_action(user, :insert) do
|
|
|
|
{:ok, user} ->
|
|
|
|
token = Auth.Token.sign_activation(user.name, user.email)
|
|
|
|
url = PlausibleWeb.Endpoint.clean_url() <> "/claim-activation?token=#{token}"
|
|
|
|
Logger.info(url)
|
|
|
|
email_template = PlausibleWeb.Email.activation_email(user, url)
|
2020-05-26 16:09:34 +03:00
|
|
|
Plausible.Mailer.send_email(email_template)
|
2020-06-08 10:35:13 +03:00
|
|
|
|
|
|
|
conn
|
|
|
|
|> render("register_success.html",
|
|
|
|
email: user.email,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, changeset} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "register_form.html",
|
|
|
|
changeset: changeset,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def claim_activation_link(conn, %{"token" => token}) do
|
|
|
|
case Auth.Token.verify_activation(token) do
|
|
|
|
{:ok, %{name: name, email: email}} ->
|
|
|
|
case Auth.create_user(name, email) do
|
|
|
|
{:ok, user} ->
|
2020-03-23 12:34:25 +03:00
|
|
|
PlausibleWeb.Email.welcome_email(user)
|
2020-05-26 16:09:34 +03:00
|
|
|
|> Plausible.Mailer.send_email()
|
2020-03-23 12:34:25 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
conn
|
|
|
|
|> put_session(:current_user_id, user.id)
|
2020-03-31 16:08:00 +03:00
|
|
|
|> put_resp_cookie("logged_in", "true", http_only: false)
|
2019-09-02 14:29:19 +03:00
|
|
|
|> redirect(to: "/password")
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, changeset} ->
|
|
|
|
send_resp(conn, 400, inspect(changeset.errors))
|
|
|
|
end
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, :expired} ->
|
|
|
|
render_error(conn, 401, "Your token has expired. Please request another activation link.")
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, _} ->
|
|
|
|
render_error(conn, 400, "Your token is invalid. Please request another activation link.")
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def password_reset_request_form(conn, _) do
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_reset_request_form.html",
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
|
|
|
|
def password_reset_request(conn, %{"email" => ""}) do
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_reset_request_form.html",
|
|
|
|
error: "Please enter an email address",
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
|
|
|
|
def password_reset_request(conn, %{"email" => email}) do
|
|
|
|
user = Repo.get_by(Plausible.Auth.User, email: email)
|
|
|
|
|
|
|
|
if user do
|
|
|
|
token = Auth.Token.sign_password_reset(email)
|
|
|
|
url = PlausibleWeb.Endpoint.clean_url() <> "/password/reset?token=#{token}"
|
|
|
|
Logger.debug("PASSWORD RESET LINK: " <> url)
|
|
|
|
email_template = PlausibleWeb.Email.password_reset_email(email, url)
|
|
|
|
Plausible.Mailer.deliver_now(email_template)
|
2020-06-08 10:35:13 +03:00
|
|
|
|
|
|
|
render(conn, "password_reset_request_success.html",
|
|
|
|
email: email,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
else
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_reset_request_success.html",
|
|
|
|
email: email,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def password_reset_form(conn, %{"token" => token}) do
|
|
|
|
case Auth.Token.verify_password_reset(token) do
|
|
|
|
{:ok, _} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_reset_form.html",
|
|
|
|
token: token,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, :expired} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render_error(
|
|
|
|
conn,
|
|
|
|
401,
|
|
|
|
"Your token has expired. Please request another password reset link."
|
|
|
|
)
|
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, _} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render_error(
|
|
|
|
conn,
|
|
|
|
401,
|
|
|
|
"Your token is invalid. Please request another password reset link."
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def password_reset(conn, %{"token" => token, "password" => pw}) do
|
|
|
|
case Auth.Token.verify_password_reset(token) do
|
|
|
|
{:ok, %{email: email}} ->
|
|
|
|
user = Repo.get_by(Auth.User, email: email)
|
|
|
|
changeset = Auth.User.set_password(user, pw)
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
case Repo.update(changeset) do
|
|
|
|
{:ok, _updated} ->
|
|
|
|
conn
|
|
|
|
|> put_flash(:login_title, "Password updated successfully")
|
|
|
|
|> put_flash(:login_instructions, "Please log in with your new credentials")
|
|
|
|
|> put_session(:current_user_id, nil)
|
2020-03-31 15:47:34 +03:00
|
|
|
|> delete_resp_cookie("logged_in")
|
2019-09-02 14:29:19 +03:00
|
|
|
|> redirect(to: "/login")
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, changeset} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_reset_form.html",
|
|
|
|
changeset: changeset,
|
|
|
|
token: token,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, :expired} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render_error(
|
|
|
|
conn,
|
|
|
|
401,
|
|
|
|
"Your token has expired. Please request another password reset link."
|
|
|
|
)
|
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, _} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render_error(
|
|
|
|
conn,
|
|
|
|
401,
|
|
|
|
"Your token is invalid. Please request another password reset link."
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def login(conn, %{"email" => email, "password" => password}) do
|
|
|
|
alias Plausible.Auth.Password
|
|
|
|
|
2020-06-08 10:35:13 +03:00
|
|
|
user =
|
|
|
|
Repo.one(
|
|
|
|
from u in Plausible.Auth.User,
|
|
|
|
where: u.email == ^email
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
if user do
|
|
|
|
if Password.match?(password, user.password_hash || "") do
|
2020-04-01 10:37:30 +03:00
|
|
|
login_dest = get_session(conn, :login_dest) || "/sites"
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
conn
|
|
|
|
|> put_session(:current_user_id, user.id)
|
2020-03-31 16:08:00 +03:00
|
|
|
|> put_resp_cookie("logged_in", "true", http_only: false)
|
2019-09-02 14:29:19 +03:00
|
|
|
|> put_session(:login_dest, nil)
|
|
|
|
|> redirect(to: login_dest)
|
|
|
|
else
|
2020-06-08 10:35:13 +03:00
|
|
|
conn
|
|
|
|
|> render("login_form.html",
|
|
|
|
error: "Wrong email or password. Please try again.",
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
else
|
|
|
|
Password.dummy_calculation()
|
2020-06-08 10:35:13 +03:00
|
|
|
|
|
|
|
conn
|
|
|
|
|> render("login_form.html",
|
|
|
|
error: "Wrong email or password. Please try again.",
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def login_form(conn, _params) do
|
|
|
|
render(conn, "login_form.html", layout: {PlausibleWeb.LayoutView, "focus.html"})
|
|
|
|
end
|
|
|
|
|
|
|
|
def password_form(conn, _params) do
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_form.html",
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"},
|
|
|
|
skip_plausible_tracking: true
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
|
|
|
|
def set_password(conn, %{"password" => pw}) do
|
|
|
|
changeset = Auth.User.set_password(conn.assigns[:current_user], pw)
|
|
|
|
|
|
|
|
case Repo.update(changeset) do
|
|
|
|
{:ok, _user} ->
|
|
|
|
redirect(conn, to: "/sites/new")
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, changeset} ->
|
2020-06-08 10:35:13 +03:00
|
|
|
render(conn, "password_form.html",
|
|
|
|
changeset: changeset,
|
|
|
|
layout: {PlausibleWeb.LayoutView, "focus.html"}
|
|
|
|
)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def user_settings(conn, _params) do
|
|
|
|
changeset = Auth.User.changeset(conn.assigns[:current_user])
|
|
|
|
subscription = Plausible.Billing.active_subscription_for(conn.assigns[:current_user].id)
|
|
|
|
render(conn, "user_settings.html", changeset: changeset, subscription: subscription)
|
|
|
|
end
|
|
|
|
|
|
|
|
def save_settings(conn, %{"user" => user_params}) do
|
|
|
|
changes = Auth.User.changeset(conn.assigns[:current_user], user_params)
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
case Repo.update(changes) do
|
|
|
|
{:ok, _user} ->
|
|
|
|
conn
|
|
|
|
|> put_flash(:success, "Account settings saved succesfully")
|
|
|
|
|> redirect(to: "/settings")
|
2020-06-08 10:35:13 +03:00
|
|
|
|
2019-09-02 14:29:19 +03:00
|
|
|
{:error, changeset} ->
|
|
|
|
render(conn, "user_settings.html", changeset: changeset)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2020-03-31 15:47:34 +03:00
|
|
|
def delete_me(conn, params) do
|
2020-06-08 10:35:13 +03:00
|
|
|
user =
|
|
|
|
conn.assigns[:current_user]
|
|
|
|
|> Repo.preload(:sites)
|
|
|
|
|> Repo.preload(:subscription)
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
for site_membership <- user.site_memberships do
|
|
|
|
Repo.delete!(site_membership)
|
|
|
|
end
|
|
|
|
|
|
|
|
for site <- user.sites do
|
|
|
|
Repo.delete!(site)
|
|
|
|
end
|
|
|
|
|
2020-05-07 14:26:22 +03:00
|
|
|
if user.subscription, do: Repo.delete!(user.subscription)
|
2019-09-02 14:29:19 +03:00
|
|
|
Repo.delete!(user)
|
|
|
|
|
2020-03-31 15:47:34 +03:00
|
|
|
logout(conn, params)
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
|
|
|
|
def logout(conn, _params) do
|
|
|
|
conn
|
|
|
|
|> configure_session(drop: true)
|
2020-03-31 15:47:34 +03:00
|
|
|
|> delete_resp_cookie("logged_in")
|
2019-09-02 14:29:19 +03:00
|
|
|
|> redirect(to: "/")
|
|
|
|
end
|
|
|
|
|
|
|
|
def google_auth_callback(conn, %{"code" => code, "state" => site_id}) do
|
|
|
|
res = Plausible.Google.Api.fetch_access_token(code)
|
|
|
|
id_token = res["id_token"]
|
|
|
|
[_, body, _] = String.split(id_token, ".")
|
2020-06-08 10:35:13 +03:00
|
|
|
id = body |> Base.decode64!(padding: false) |> Jason.decode!()
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
Plausible.Site.GoogleAuth.changeset(%Plausible.Site.GoogleAuth{}, %{
|
|
|
|
email: id["email"],
|
|
|
|
refresh_token: res["refresh_token"],
|
|
|
|
access_token: res["access_token"],
|
|
|
|
expires: NaiveDateTime.utc_now() |> NaiveDateTime.add(res["expires_in"]),
|
|
|
|
user_id: conn.assigns[:current_user].id,
|
|
|
|
site_id: site_id
|
2020-06-08 10:35:13 +03:00
|
|
|
})
|
|
|
|
|> Repo.insert!()
|
2019-09-02 14:29:19 +03:00
|
|
|
|
|
|
|
site = Repo.get(Plausible.Site, site_id)
|
|
|
|
|
2020-02-04 16:44:13 +03:00
|
|
|
redirect(conn, to: "/#{URI.encode_www_form(site.domain)}/settings#google-auth")
|
2019-09-02 14:29:19 +03:00
|
|
|
end
|
|
|
|
end
|