jam-cloud/app/controllers/sessions_controller.rb

22 lines
480 B
Ruby

# this is not a jam session - this is an 'auth session'
class SessionsController < ApplicationController
def new
end
def create
user = User.find_by_email(params[:session][:email])
if user && user.authenticate(params[:session][:password])
sign_in user
redirect_back_or jam_sessions_url
else
flash.now[:error] = 'Invalid email/password combination'
render 'new'
end
end
def destroy
sign_out
redirect_to root_url
end
end