Review Devise integration and Adaptions

[bkleinen]

Review Devise integration:

• is it still up to date with the new devise version?
• review adaptions and extensions of devise in the concerto app for security
• fix logout

[bkleinen]

devise gem installation output:

--

To use retry middleware with Faraday v2.0+, install faraday-retry gem To use multipart middleware with Faraday v2.0+, install faraday-multipart gem; note: this is used by the ManageGHES client for uploading licenses /Users/kleinen/mine/current/htw/courses/project-makerspace/code/concerto-new/concerto2/config/initializers/02-concerto_config.rb:5: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead. create config/initializers/devise.rb conflict config/locales/devise.en.yml Overwrite /Users/kleinen/mine/current/htw/courses/project-makerspace/code/concerto-new/concerto2/config/locales/devise.en.yml? (enter "h" for help) [Ynaqdhm] a force config/locales/devise.en.yml

Depending on your application's configuration some manual setup may be required:

1. Ensure you have defined default url options in your environments files. Here is an example of default_url_options appropriate for a development environment in config/environments/development.rb:

   config.action_mailer.default_url_options = { host: 'localhost', port: 3000 }

   In production, :host should be set to the actual host of your application.

   • Required for all applications. *

2. Ensure you have defined root_url to something in your config/routes.rb. For example:

   root to: "home#index"

   • Not required for API-only Applications *

3. Ensure you have flash messages in app/views/layouts/application.html.erb. For example:

   <%= notice %>

   <%= alert %>

   • Not required for API-only Applications *

4. You can copy Devise views (for customization) to your app by running:

   rails g devise:views

   • Not required *

===============================================================================

[bkleinen]

AAARGH! sie haben eine eigene authentifizierungslogik, siehe zb

feeds controller:

def index if !ConcertoConfig[:public_concerto] && current_user.nil? run_callbacks :auth_plugin if @auth_url.nil?

no auth plugin detected, use default login

redirect_to(new_user_session_path) else

use custom plugin authentication

redirect_to(@auth_url) end end

@motd = ConcertoConfig.get(:motd_html)
@feeds = Feed.accessible_by(current_ability).roots

end