47deeefe57
* create admin setting for new user status
* limiting on signup working 🎉
* update registration specs
* sort out OAuth registrations
70 lines
3 KiB
Ruby
70 lines
3 KiB
Ruby
module Settings
|
|
class Authentication < Base
|
|
self.table_name = :settings_authentications
|
|
|
|
NEW_USER_STATUSES = %w[good_standing limited].freeze
|
|
|
|
setting :allow_email_password_login, type: :boolean, default: true
|
|
setting :allow_email_password_registration, type: :boolean, default: false
|
|
setting :allowed_registration_email_domains, type: :array, default: %w[], validates: {
|
|
valid_domain_csv: true
|
|
}
|
|
setting :apple_client_id, type: :string
|
|
setting :apple_key_id, type: :string
|
|
setting :apple_pem, type: :string
|
|
setting :apple_team_id, type: :string
|
|
setting :blocked_registration_email_domains, type: :array, default: %w[], validates: {
|
|
valid_domain_csv: true
|
|
}
|
|
setting :display_email_domain_allow_list_publicly, type: :boolean, default: false
|
|
setting :facebook_key, type: :string
|
|
setting :facebook_secret, type: :string
|
|
setting :forem_key, type: :string
|
|
setting :forem_secret, type: :string
|
|
setting :github_key, type: :string, default: ApplicationConfig["GITHUB_KEY"]
|
|
setting :github_secret, type: :string, default: ApplicationConfig["GITHUB_SECRET"]
|
|
setting :google_oauth2_key, type: :string
|
|
setting :google_oauth2_secret, type: :string
|
|
setting :invite_only_mode, type: :boolean, default: false
|
|
setting :new_user_status, type: :string, default: "good_standing", validates: {
|
|
inclusion: { in: NEW_USER_STATUSES }
|
|
}
|
|
setting :providers, type: :array, default: %w[]
|
|
setting :require_captcha_for_email_password_registration, type: :boolean, default: false
|
|
setting :twitter_key, type: :string, default: ApplicationConfig["TWITTER_KEY"]
|
|
setting :twitter_secret, type: :string, default: ApplicationConfig["TWITTER_SECRET"]
|
|
|
|
# Google ReCAPTCHA keys
|
|
setting :recaptcha_site_key, type: :string, default: ApplicationConfig["RECAPTCHA_SITE"]
|
|
setting :recaptcha_secret_key, type: :string, default: ApplicationConfig["RECAPTCHA_SECRET"]
|
|
|
|
# Apple uses different keys than the usual `PROVIDER_NAME_key` or
|
|
# `PROVIDER_NAME_secret` so these will help the generalized authentication
|
|
# code to work, i.e. https://github.com/forem/forem/blob/master/app/helpers/authentication_helper.rb#L26-L29
|
|
def self.apple_key
|
|
return unless apple_client_id.present? && apple_key_id.present? &&
|
|
apple_pem.present? && apple_team_id.present?
|
|
|
|
"present"
|
|
end
|
|
singleton_class.alias_method(:apple_secret, :apple_key)
|
|
|
|
# @param domain [String] The domain to check for acceptability
|
|
#
|
|
# @return [Boolean] do we allow this domain?
|
|
def self.acceptable_domain?(domain:)
|
|
return false if blocked_registration_email_domains.detect do |blocked|
|
|
domain == blocked ||
|
|
domain.ends_with?(".#{blocked}")
|
|
end
|
|
return true if allowed_registration_email_domains.empty?
|
|
return true if allowed_registration_email_domains.include?(domain)
|
|
|
|
false
|
|
end
|
|
|
|
def self.limit_new_users?
|
|
new_user_status == "limited"
|
|
end
|
|
end
|
|
end
|