Docker/Maybe
Docker/Maybe
1
0
Fork 0
mirror of https://github.com/maybe-finance/maybe.git synced 2025-08-05 05:25:24 +02:00
Code Issues Releases Activity Actions

Temporary additional logging to continue debugging MFA issues
Some checks are pending
Publish Docker image / ci (push) Waiting to run
Details
Publish Docker image / Build docker image (push) Blocked by required conditions
Details

Browse source
This commit is contained in:
Josh Pigford 2025-03-05 13:20:36 -06:00
parent e49bda4a2e
commit 28bfcda50a
3 changed files with 81 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

43
app/controllers/concerns/authentication.rb
View file

@ -16,12 +16,19 @@ module Authentication
private
def authenticate_user!
Rails.logger.info "Authentication#authenticate_user! - Checking for session cookie"
if session_record = find_session_by_cookie
Rails.logger.info "Authentication#authenticate_user! - Found valid session: #{session_record.id} for user: #{session_record.user_id}"
Current.session = session_record
else
Rails.logger.info "Authentication#authenticate_user! - No valid session found"
if self_hosted_first_login?
Rails.logger.info "Authentication#authenticate_user! - Self-hosted first login detected, redirecting to registration"
redirect_to new_registration_url
else
Rails.logger.info "Authentication#authenticate_user! - Redirecting to login page"
redirect_to new_session_url
end
end
@ -29,21 +36,35 @@ module Authentication
def find_session_by_cookie
cookie_value = cookies.signed[:session_token]
Rails.logger.info "Looking for session with cookie value: #{cookie_value.present? ? 'present' : 'missing'}"
session = Session.find_by(id: cookie_value)
Rails.logger.info "Session found: #{session.present? ? 'yes' : 'no'}"
session
Rails.logger.info "Authentication#find_session_by_cookie - Looking for session with cookie value: #{cookie_value.present? ? 'present' : 'missing'}"
if cookie_value.present?
session = Session.find_by(id: cookie_value)
Rails.logger.info "Authentication#find_session_by_cookie - Session found: #{session.present? ? 'yes' : 'no'}"
if session.present?
Rails.logger.info "Authentication#find_session_by_cookie - Session belongs to user: #{session.user_id}"
end
session
else
Rails.logger.info "Authentication#find_session_by_cookie - No session cookie found"
nil
end
end
def create_session_for(user)
Rails.logger.info "Authentication#create_session_for - Creating session for user: #{user.id}"
session = user.sessions.create!
Rails.logger.info "Setting session cookie with value: #{session.id}"
# Explicitly set SameSite attribute and ensure cookie is set properly
cookies.signed.permanent[:session_token] = {
value: session.id,
httponly: true,
same_site: :lax
}
Rails.logger.info "Authentication#create_session_for - Session created with ID: #{session.id}"
Rails.logger.info "Authentication#create_session_for - Setting session cookie"
cookies.signed.permanent[:session_token] = { value: session.id, httponly: true }
Rails.logger.info "Authentication#create_session_for - Cookie set, verifying..."
cookie_value = cookies.signed[:session_token]
Rails.logger.info "Authentication#create_session_for - Cookie verification: #{cookie_value == session.id ? 'successful' : 'failed'}"
session
end