Merge pull request #1 from elixirschool/user-session

user auth flow

Author: SophieDeBenedetto

assets/package-lock.json

@@ -0,0 +1,26 @@
+defmodule PointingParty.Account do
+  use Ecto.Schema
+  import Ecto.Changeset
+  alias PointingParty.Account
+
+  schema "accounts" do
+    field :username, :string
+  end
+
+  def create(attrs) do
+    changeset = changeset(%Account{}, attrs)
+    if changeset.valid? do
+      account = apply_changes(changeset)
+      {:ok, account}
+    else
+      {:error, %{changeset | action: :insert}}
+    end
+  end
+
+  @doc false
+  def changeset(account, attrs \\ %{}) do
+    account
+    |> cast(attrs, [:username])
+    |> validate_required([:username])
+  end
+end

assets/static/images/pointing-party-logo.png

@@ -0,0 +1,6 @@
+defmodule PointingParty.Account.Auth do
+  alias PointingParty.Account
+  def login(params) do
+    Account.create(params)
+  end
+end

lib/pointing_party/account.ex

@@ -1,6 +1,8 @@
 defmodule PointingParty.Card do
   use Ecto.Schema
   import Ecto.Changeset
+  alias PointingParty.Repo
+  alias PointingParty.Card
 
   schema "cards" do
     field :description, :string
@@ -15,4 +17,8 @@ defmodule PointingParty.Card do
     |> cast(attrs, [:title, :description])
     |> validate_required([:title, :description])
   end
+
+  def get!(id) do
+    Repo.get!(Card, id)
+  end
 end

lib/pointing_party/account/auth.ex

@@ -40,6 +40,7 @@ defmodule PointingPartyWeb do
       use Phoenix.HTML
 
       import PointingPartyWeb.ErrorHelpers
+      import PointingPartyWeb.LayoutHelpers
       import PointingPartyWeb.Gettext
       alias PointingPartyWeb.Router.Helpers, as: Routes
     end

lib/pointing_party/card.ex

@@ -0,0 +1,10 @@
+defmodule PointingPartyWeb.CardController do
+  use PointingPartyWeb, :controller
+  alias PointingParty.Card
+
+  def index(conn, _params) do
+    # temporary, just to get something on the page for now
+    card = Card.get!(1)
+    render(conn, "index.html", card: card)
+  end
+end

lib/pointing_party_web.ex

@@ -0,0 +1,27 @@
+defmodule PointingPartyWeb.SessionController do
+  use PointingPartyWeb, :controller
+  alias PointingParty.Account.Auth
+  alias PointingParty.Account
+
+  def new(conn, _params) do
+    changeset = Account.changeset(%Account{})
+    render(conn, "new.html", changeset: changeset)
+  end
+
+  def create(conn, params) do
+    case Auth.login(params["account"]) do
+      {:ok, %{username: username}} ->
+        conn
+        |> put_session(:username, username)
+        |> redirect(to: "/cards")
+        |> halt()
+      {:error, changeset} ->
+        render(conn, "new.html", changeset: changeset)
+    end
+  end
+
+  def delete(conn, _params) do
+    clear_session(conn)
+    |> redirect(to: "/login") |> halt()
+  end
+end

lib/pointing_party_web/controllers/card_controller.ex

@@ -0,0 +1,17 @@
+defmodule PointingPartyWeb.Plugs.Auth do
+  import Plug.Conn
+  import Phoenix.Controller
+
+  def init(default), do: default
+
+  def call(conn, _default) do
+    case authenticate(conn) do
+      nil -> conn |> redirect(to: "/login") |> halt()
+      username -> assign(conn, :username, username)
+    end
+  end
+
+  defp authenticate(conn) do
+     get_session(conn, :username)
+  end
+end

lib/pointing_party_web/controllers/session_controller.ex

@@ -15,10 +15,17 @@ defmodule PointingPartyWeb.Router do
 
   scope "/", PointingPartyWeb do
     pipe_through :browser
-
+    get "/login", SessionController, :new
+    post "/login", SessionController, :create
+    delete "/logout", SessionController, :delete
     get "/", PageController, :index
   end
 
+  scope "/", PointingPartyWeb do
+    pipe_through [:browser, PointingPartyWeb.Plugs.Auth]
+    get "/cards", CardController, :index
+  end
+
   # Other scopes may use custom stacks.
   # scope "/api", PointingPartyWeb do
   #   pipe_through :api