application_controller.rb

module Clearance
  module App
    module Controllers
      module ApplicationController
    
        def self.included(controller)
          controller.class_eval do
                      
            helper_method :current_user
            helper_method :signed_in?
            
            hide_action :current_user, :signed_in?
        
            def current_user
              @_current_user ||= (user_from_session || user_from_cookie)
            end

            def signed_in?
              ! current_user.nil?
            end
            
            protected
            
            def authenticate
              deny_access unless signed_in?
            end

            def user_from_session
              if session[:user_id]
                user = User.find_by_id(session[:user_id])
                user && user.email_confirmed? ? user : nil                
              end
            end

            def user_from_cookie
              if cookies[:remember_token]
                user = User.find_by_token(cookies[:remember_token])
                user && user.remember? ? user : nil                
              end
            end

            # Hook
            def sign_user_in(user)
              sign_in(user)
            end

            def sign_in(user)
              if user
                session[:user_id] = user.id
              end
            end

            def redirect_back_or(default)
              session[:return_to] ||= params[:return_to]
              if session[:return_to] 
                redirect_to(session[:return_to])
              else 
                redirect_to(default)
              end
              session[:return_to] = nil
            end

            def redirect_to_root
              redirect_to root_url
            end

            def store_location
              session[:return_to] = request.request_uri if request.get?
            end

            def deny_access(flash_message = nil, opts = {})
              store_location
              flash[:failure] = flash_message if flash_message
              render :template => "/sessions/new", :status => :unauthorized 
            end
            
          end
        end
        
      end
    end
  end
end