cfd5434d6c
* Action to request account deletion by email * Confirmation page for user destroy * Remove some of the old destroy user code * System tests for user destroy * Moved user destroy tokens to redis * Change tests according to the new user destroy token storage (in redis) * Added info about the link to user delete confirmation email * Remove blank like from schema.rb * Delete user destroy token on user delete * Update confirm user destroy js
119 lines
5 KiB
Text
119 lines
5 KiB
Text
<% unless @user.identities.exists?(provider: "github") %>
|
|
<div class="field">
|
|
<a href="/users/auth/github" class="big-button cta" data-no-instant>
|
|
<img src="<%= asset_path("github-logo.svg") %>" alt="github logo"> CONNECT GITHUB ACCOUNT
|
|
</a>
|
|
</div>
|
|
<hr />
|
|
<% end %>
|
|
|
|
<% unless @user.identities.exists?(provider: "twitter") %>
|
|
<div class="field">
|
|
<a href="/users/auth/twitter?callback_url=<%= ApplicationConfig["APP_PROTOCOL"] %><%= ApplicationConfig["APP_DOMAIN"] %>/users/auth/twitter/callback" class="big-button cta" data-no-instant>
|
|
<img src="<%= asset_path("twitter-logo.svg") %> " alt="twitter logo"> CONNECT TWITTER ACCOUNT
|
|
</a>
|
|
</div>
|
|
<hr />
|
|
<% end %>
|
|
|
|
<h2>DEV API Keys</h2>
|
|
<p>You can generate personal API keys to use for authentication with the DEV API. The API is still in early beta though. The <a href="/api">DEV API documentation</a> contains further information.</a></p>
|
|
<h3>Generate a new Key</h3>
|
|
<%= form_tag users_api_secrets_path, method: :post do %>
|
|
<%= fields_for :api_secret do |api_secret| %>
|
|
<div class="field">
|
|
<%= api_secret.label(:description, "Description") %>
|
|
<%= api_secret.text_field(:description, placeholder: "What's this API key for?", required: true) %>
|
|
</div>
|
|
<% end %>
|
|
<button class="big-action cta" id="new__api__secret__btn" type="submit">
|
|
Generate API Key
|
|
</button>
|
|
<% end %>
|
|
|
|
<h3>Active API keys (never share these!)</h3>
|
|
<% if @user.api_secrets.empty? %>
|
|
<p>None yet!</p>
|
|
<% end %>
|
|
|
|
<% @user.api_secrets.order(created_at: :desc).each do |api_secret| %>
|
|
<div class="api__secret__container">
|
|
<div class="api__secret__desc">
|
|
<p class="title"><%= api_secret.description %></p>
|
|
<p class="content"><%= api_secret.secret %></p>
|
|
<p class="subtitle">Created <%= api_secret.created_at.to_date.to_s %></p>
|
|
</div>
|
|
|
|
<div class="api__secret__revoke">
|
|
<%= form_tag users_api_secret_path(api_secret.id), method: :delete do %>
|
|
<%= button_tag "Revoke", class: "big-action danger-button" %>
|
|
<% end %>
|
|
</div>
|
|
</div>
|
|
<% end %>
|
|
|
|
<h2 style="color: #ff0000;">Danger Zone</h2>
|
|
<% if @user.identities.count == 2 %>
|
|
<h3>Remove OAuth Associations</h3>
|
|
<h4 style="font-weight:400;">
|
|
You can remove one of your authentication methods. We'll still need one to authenticate you.
|
|
<br>
|
|
<br>
|
|
Removing an OAuth association will:
|
|
<ul>
|
|
<li>remove your ability to sign in with that account</li>
|
|
<li>remove the associated URL from your profile</li>
|
|
</ul>
|
|
<strong>
|
|
Note that this does not revoke our OAuth app access; you will have to do so in your
|
|
<a href="https://twitter.com/settings/applications">Twitter profile settings</a> or your
|
|
<a href="https://github.com/settings/applications">GitHub profile settings</a>.
|
|
</strong>
|
|
<br>
|
|
<br>
|
|
<%= form_tag "/users/remove_association", method: :delete, onsubmit: "return confirm('Are you absolutely sure you want to remove your Twitter account?');" do %>
|
|
<%= hidden_field_tag :provider, "twitter" %>
|
|
<button class="big-action danger-button small-button" type="submit">
|
|
<img src="<%= asset_path("twitter-logo.svg") %>" alt="twitter logo"> REMOVE TWITTER
|
|
</button>
|
|
<% end %>
|
|
<br />
|
|
<%= form_tag "/users/remove_association", method: :delete, onsubmit: "return confirm('Are you absolutely sure you want to remove your GitHub account?');" do %>
|
|
<%= hidden_field_tag :provider, "github" %>
|
|
<button class="big-action danger-button small-button" type="submit">
|
|
<img src="<%= asset_path("github-logo.svg") %>" alt="github logo"> REMOVE GITHUB
|
|
</button>
|
|
<% end %>
|
|
</h4>
|
|
<% end %>
|
|
|
|
<h3>Delete Account</h3>
|
|
<h4 style="font-weight:400;">
|
|
<%= form_tag user_request_destroy_path, method: :get, autocomplete: "off", id: "delete__account" do %>
|
|
Deleting your account will:
|
|
<ul class="delete__account">
|
|
<li>delete your profile, along with your Twitter and/or GitHub associations.
|
|
This does not include app permissions. You will have to remove them yourself on
|
|
<a href="https://twitter.com/settings/applications">Twitter profile settings</a> and
|
|
<a href="https://github.com/settings/applications">GitHub profile settings</a>.
|
|
</li>
|
|
<%# TODO: expand the delete messaging later %>
|
|
<li>delete any and all content you have, such as articles, comments, your reading list or chat messages.</li>
|
|
<li>allow your username to become available to anyone.</li>
|
|
</ul>
|
|
<button class="big-action danger-button small-button" id="delete__account__btn" type="submit">
|
|
DELETE ACCOUNT
|
|
</button>
|
|
<% end %>
|
|
</h4>
|
|
<br>
|
|
If you would like to keep your content under the <%= link_to "@ghost", "/ghost" %> account, please:
|
|
<h3>Request Account Deletion</h3>
|
|
<h4 style="font-weight: 400;">
|
|
<br>
|
|
<a href="mailto:<%= ApplicationConfig["DEFAULT_SITE_EMAIL"] %>?subject=Request Account Deletion&body=<%= @email_body %>">
|
|
Click this link to request account deletion via email.
|
|
</a>
|
|
<br>
|
|
Be sure to change the email template to fit your needs.
|
|
</h4>
|