app/controllers/api/sessions_controller.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

# frozen_string_literal: true

module Api
  # The controller that handles authentications.
  class SessionsController < AuthenticatedController
    skip_before_action :validate_jwt, only: [:create]

    def create
      @user_account = UserAccount.find_by(email: permitted_params[:email])

      unless @user_account&.authenticate(permitted_params[:password])
        render json: { error_message: 'Credenciales incorrectas' }, status: :unauthorized and return
      end

      render json: generate_token, status: :ok
    end

    def destroy
      current_user_account.update_attribute(:session_key, nil)

      render status: :no_content
    end

    private

    def service_params
      { email: @user_account.email,
        role: @user_account.role }
    end

    def permitted_params
      params.require(:credentials).permit(:email, :password)
    end
  end
end