cartodb-4.42/app/controllers/carto/api/multifactor_authentication_controller.rb
2024-04-06 05:25:13 +00:00

51 lines
1.3 KiB
Ruby

module Carto
module Api
class MultifactorAuthenticationController < ::Api::ApplicationController
extend Carto::DefaultRescueFroms
include OrganizationUsersHelper
ssl_required
before_action :load_organization
before_action :admins_only
before_action :load_user
before_action :create_service
before_action :ensure_edit_permissions
setup_default_rescues
def show
render_jsonp({ mfa_required: @service.exists?(type: base_params[:type]) }, 200)
end
def create
if @service.exists?(type: base_params[:type])
raise Carto::UnprocesableEntityError.new('Multi-factor authentication already exists')
end
@service.update(enabled: true, type: base_params[:type])
render_jsonp({ success: true }, 201)
end
def destroy
unless @service.exists?(type: base_params[:type])
raise Carto::UnprocesableEntityError.new('Multi-factor authentication does not exist')
end
@service.update(enabled: false, type: base_params[:type])
render_jsonp({ success: true }, 204)
end
private
def base_params
@base_params ||= params.permit([:type])
end
def create_service
@service = Carto::UserMultifactorAuthUpdateService.new(user_id: @user.id)
end
end
end
end