docbrown/app/controllers/email_authorizations_controller.rb

15 lines
589 B
Ruby

class EmailAuthorizationsController < ApplicationController
before_action :authenticate_user!
def verify
user = User.find_by(username: params[:username])
raise ActionController::RoutingError, "Not Found" unless current_user == user
email_authorization = user.email_authorizations.order("created_at DESC").first
correct_token = email_authorization.confirmation_token == params[:confirmation_token]
raise ActionController::RoutingError, "Not Found" unless correct_token
email_authorization.update(verified_at: Time.current)
redirect_to root_path
end
end