class MembersController < ApplicationController load_and_authorize_resource skip_authorize_resource only: [:nearby, :unsubscribe, :finish_signup] after_action :expire_cache_fragments, only: :create def index @sort = params[:sort] @members = if @sort == 'recently_joined' Member.confirmed.recently_joined.paginate(page: params[:page]) else Member.confirmed.paginate(page: params[:page]) end respond_to do |format| format.html # index.html.haml format.json { render json: @members.to_json(only: [ :id, :login_name, :slug, :bio, :created_at, :location, :latitude, :longitude ]) } end end def show @member = Member.confirmed.find(params[:id]) @twitter_auth = @member.auth('twitter') @flickr_auth = @member.auth('flickr') @facebook_auth = @member.auth('facebook') @posts = @member.posts # The garden form partial is called from the "New Garden" tab; # it requires a garden to be passed in @garden. # The new garden is not persisted unless Garden#save is called. @garden = Garden.new respond_to do |format| format.html # show.html.haml format.json { render json: @member.to_json(only: [ :id, :login_name, :bio, :created_at, :slug, :location, :latitude, :longitude ]) } format.rss { render( layout: false, locals: { member: @member } )} end end def view_follows @member = Member.confirmed.find(params[:login_name]) @follows = @member.followed.paginate(page: params[:page]) end def view_followers @member = Member.confirmed.find(params[:login_name]) @followers = @member.followers.paginate(page: params[:page]) end EMAIL_TYPE_STRING = { send_notification_email: "direct message notifications", send_planting_reminder: "planting reminders" } def unsubscribe begin verifier = ActiveSupport::MessageVerifier.new(ENV['RAILS_SECRET_TOKEN']) decrypted_message = verifier.verify(params[:message]) @member = Member.find(decrypted_message[:member_id]) @type = decrypted_message[:type] @member.update(@type => false) flash.now[:notice] = "You have been unsubscribed from #{EMAIL_TYPE_STRING[@type]} emails." rescue ActiveSupport::MessageVerifier::InvalidSignature flash.now[:alert] = "We're sorry, there was an error updating your settings." end end def finish_signup @member = current_member if request.patch? && params[:member] if @member.update(member_params) @member.skip_reconfirmation! bypass_sign_in(@member) redirect_to root_path, notice: 'Welcome.' else flash[:alert] = 'Failed to complete signup' @show_errors = true end end end private def expire_cache_fragments expire_fragment("homepage_stats") end def member_params params.require(:member).permit(:login_name, :tos_agreement, :email, :newsletter) end end