Merge pull request #291 from espoo-dev/feat-devise-confirmable

Configs Devise Confirmable for Users

Author: mattfeg

app/models/user.rb

@@ -2,10 +2,10 @@
 
 class User < ApplicationRecord
   # Include default devise modules. Others available are:
-  # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable
+  # :lockable, :timeoutable, :trackable and :omniauthable
   devise :database_authenticatable, :registerable,
     :recoverable, :rememberable, :validatable, :api,
-    :omniauthable, omniauth_providers: %i[github strava]
+    :omniauthable, :confirmable, omniauth_providers: %i[github strava]
 
   has_many :event_procedures, dependent: :destroy
   has_many :medical_shifts, dependent: :destroy

config/environments/test.rb

@@ -46,6 +46,8 @@
   # ActionMailer::Base.deliveries array.
   config.action_mailer.delivery_method = :test
 
+  config.action_mailer.default_url_options = { host: "localhost", port: 3000 }
+
   # Print deprecation notices to the stderr.
   config.active_support.deprecation = :stderr
 

db/migrate/20250430144654_add_confirmable_fields_to_users.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+class AddConfirmableFieldsToUsers < ActiveRecord::Migration[7.1]
+  def change
+    change_table :users, bulk: true do |t|
+      t.timestamp :confirmed_at
+      t.timestamp :confirmation_sent_at
+      t.text :confirmation_token
+      t.text :unconfirmed_email
+    end
+  end
+end

db/schema.rb

@@ -16,4 +16,33 @@
   describe "validations" do
     it { is_expected.to validate_uniqueness_of(:email).case_insensitive }
   end
+
+  describe "confirmations" do
+    it "is not confirmed by default" do
+      user = create(:user)
+      expect(user).not_to be_confirmed
+    end
+
+    it "can be confirmed" do
+      user = create(:user)
+      user.confirm
+      expect(user).to be_confirmed
+    end
+
+    it "generates a confirmation token" do
+      user = create(:user)
+      expect(user.confirmation_token).not_to be_nil
+    end
+
+    it "do not allow login before confirmation" do
+      user = create(:user)
+      expect(user).not_to be_active_for_authentication
+    end
+
+    it "allows login after confirmation" do
+      user = create(:user)
+      user.confirm
+      expect(user).to be_active_for_authentication
+    end
+  end
 end