e588fa7ece
* Initial automatic cleanup with rubocop * Fix syntax error introduced by rubocop * Cleanup seeds file * Cleanup lib folder * Exclude bin folder because it contains auto generated files * Make Rubocop a little bit more chatty * Block length should not include comments in the count * Cleanup config folder * Cleanup specs * Updated Rubocop version and generated a todo file * Fix broken ArticlesApi spec * Fix tests * Restored rubocop pre-commit hook
29 lines
995 B
Ruby
29 lines
995 B
Ruby
# All Administrate controllers inherit from this `Admin::ApplicationController`,
|
|
# making it the ideal place to put authentication logic or other
|
|
# before_filters.
|
|
#
|
|
# If you want to add pagination or other controller-level concerns,
|
|
# you're free to overwrite the RESTful controller actions.
|
|
module Admin
|
|
class ApplicationController < Administrate::ApplicationController
|
|
include Pundit
|
|
before_action :authorize_admin
|
|
|
|
def order
|
|
@_order ||= Administrate::Order.new(params[:order] || "id", params[:direction] || "desc")
|
|
end
|
|
|
|
def valid_request_origin?
|
|
# Temp monkey patch. Since we use https at the edge via fastly I think our protocol expectations
|
|
# are out of wack.
|
|
raise InvalidAuthenticityToken, NULL_ORIGIN_MESSAGE if request.origin == "null"
|
|
request.origin.nil? || request.origin.gsub("https", "http") == request.base_url.gsub("https", "http")
|
|
end
|
|
|
|
private
|
|
|
|
def authorize_admin
|
|
authorize :admin, :show?
|
|
end
|
|
end
|
|
end
|