Docker/Maybe
Docker/Maybe
1
0
Fork 0
mirror of https://github.com/maybe-finance/maybe.git synced 2025-08-10 07:55:21 +02:00
Code Issues Releases Activity Actions

allow automatic login via configured header value

Browse source
This commit is contained in:
Andrew Roberts 2025-03-26 12:36:59 -04:00
parent 7096eefa2b
commit 32f7d7aca8
2 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
app/controllers/concerns/authentication.rb
View file

@ -18,6 +18,8 @@ module Authentication
def authenticate_user!
if session_record = find_session_by_cookie
Current.session = session_record
elsif session_record = create_session_by_remote_header
Current.session = session_record
else
if self_hosted_first_login?
redirect_to new_registration_url
@ -27,6 +29,21 @@ module Authentication
end
end
def create_session_by_remote_header
if user_email = request.headers[Rails.application.config.remote_login_email_header_name]
unless user = User.find_by(email: user_email)
user = User.new
user.email = user_email
user.password = SecureRandom.base58(50)
family = Family.new
user.family = family
user.role = :admin
user.save
end
create_session_for(user)
end
end
def find_session_by_cookie
cookie_value = cookies.signed[:session_token]

2
config/application.rb
View file

@ -29,6 +29,8 @@ module Maybe
config.app_mode = (ENV["SELF_HOSTED"] == "true" || ENV["SELF_HOSTING_ENABLED"] == "true" ? "self_hosted" : "managed").inquiry
config.remote_login_email_header_name = ENV["REMOTE_LOGIN_EMAIL_HEADER"]
# Self hosters can optionally set their own encryption keys if they want to use ActiveRecord encryption.
if Rails.application.credentials.active_record_encryption.present?
config.active_record.encryption = Rails.application.credentials.active_record_encryption