users_controller.rb
No OneTemporary
Actions

Subscribers

None

File Metadata

	class UsersController < ApplicationController
	before_action :authenticate_user!

	before_action :user, only: [:token, :generate_token]

	# GET /users/1/token
	def token
	end

	# POST /users/1/generate_token
	def generate_token
	@user.token = SecureRandom.hex(10)
	@user.save!

	redirect_to token_user_path(@user)
	end

	private

	def user
	@user \|\|= User.find(params[:id])

	# Guard access to other user tokens
	if current_user.id != @user.id && !admin?
	redirect_to(root_path, alert: 'You need admin rights for that!')
	end

	@user
	end

	end