Added Magic Sign-up/-in Links

Author: eelcoj

app/controllers/magic_sessions_controller.rb

@@ -0,0 +1,32 @@
+class MagicSessionsController < ApplicationController
+  allow_unauthenticated_access only: %w[show new create]
+  before_action :set_user_by_token, only: %i[ show ]
+
+  def show
+    start_new_session_for @user
+
+    redirect_to root_path
+  end
+
+  def new
+    @signin = MagicSignin.new
+  end
+
+  def create
+    MagicSignin.new(signin_params).save
+
+    redirect_to new_magic_session_path
+  end
+
+  private
+
+    def signin_params
+      params.expect(magic_signin: [ :email_address ])
+    end
+
+    def set_user_by_token
+      @user = User.find_by_token_for(:signin, params[:token])
+    rescue ActiveSupport::MessageVerifier::InvalidSignature
+      redirect_to new_magic_signup_path, alert: "Link is invalid or has expired."
+    end
+end

app/controllers/magic_signups_controller.rb

@@ -0,0 +1,20 @@
+class MagicSignupsController < ApplicationController
+  allow_unauthenticated_access only: %w[new create]
+  invisible_captcha only: %w[create], timestamp_enabled: false
+
+  def new
+    @signup = MagicSignin.new
+  end
+
+  def create
+    MagicSignin.new(signup_params).save
+
+    redirect_to new_magic_signup_path
+  end
+
+  private
+
+  def signup_params
+    params.expect(magic_signin: [ :email_address ])
+  end
+end

app/mailers/magic_signup_mailer.rb

@@ -0,0 +1,6 @@
+class MagicSignupMailer < ApplicationMailer
+  def magic_link(user)
+    @user = user
+    mail to: @user.email_address
+  end
+end

app/models/magic_signin.rb

@@ -0,0 +1,43 @@
+class MagicSignin
+  AUTO_GENERATED_PASSWORD = SecureRandom.hex(32)
+
+  include ActiveModel::Model
+  include ActiveModel::Attributes
+
+  attribute :email_address, :string
+
+  validates :email_address, presence: true
+
+  validates :email_address, is_not_spam: true
+
+  def save
+    return unless valid?
+
+    User.where(email_address: email_address).first_or_create.tap do |user|
+      if user.new_record?
+        user.password = AUTO_GENERATED_PASSWORD
+        user.save
+
+        create_workspace_for user
+      end
+
+      send_magic_link_to user
+    end
+  end
+
+  def model_name
+    ActiveModel::Name.new(self, nil, self.class.name)
+  end
+
+  private
+
+  def create_workspace_for(user)
+    Workspace.create(name: "New Workspace").tap do |workspace|
+      workspace.users << user
+    end
+  end
+
+  def send_magic_link_to(user)
+    MagicSignupMailer.magic_link(user).deliver_later
+  end
+end

app/models/user.rb

@@ -5,4 +5,6 @@ class User < ApplicationRecord
   belongs_to :workspace
 
   normalizes :email_address, with: ->(e) { e.strip.downcase }
+
+  generates_token_for :signin, expires_in: 5.minutes
 end

app/views/magic_sessions/new.html.erb

@@ -0,0 +1,11 @@
+<%= tag.div(flash[:alert], style: "color:red") if flash[:alert] %>
+<%= tag.div(flash[:notice], style: "color:green") if flash[:notice] %>
+
+<%= form_with model: @signin, url: magic_sessions_path do |form| %>
+  <%= form.email_field :email_address, required: true, autofocus: true, autocomplete: "username", placeholder: "Enter your email address", value: params[:email_address] %><br>
+
+  <%= form.submit "Sign in" %>
+<% end %>
+<br>
+
+<%= link_to "Don't have an account?", new_magic_signup_path %>

app/views/magic_signup_mailer/magic_link.html.erb

@@ -0,0 +1,3 @@
+<p>
+  Here is your magic link: <%= magic_session_url(@user.generate_token_for(:signin)) %>
+</p>

app/views/magic_signup_mailer/magic_link.text.erb

@@ -0,0 +1 @@
+Here is your magic link: <%= magic_session_url(@user.generate_token_for(:signin)) %>

app/views/magic_signups/new.html.erb

@@ -0,0 +1,12 @@
+<%= tag.div(flash[:alert], style: "color:red") if flash[:alert] %>
+<%= tag.div(flash[:notice], style: "color:green") if flash[:notice] %>
+
+<%= form_with model: @signup, url: magic_signups_path do |form| %>
+  <%= form.email_field :email_address, required: true, autofocus: true, autocomplete: "username", placeholder: "Enter your email address", value: params[:email_address] %><br>
+
+  <%= invisible_captcha %>
+
+  <%= form.submit "Sign up" %>
+
+  <%= link_to "Already have an account?", new_magic_session_path %>
+<% end %>

config/routes.rb

@@ -5,6 +5,9 @@
   resources :passwords, param: :token
   resources :invitations, only: %w[index new create]
   resources :accept_invitations, only: %w[new create]
+
+  resources :magic_signups, path: "magic-signup", only: %w[new create]
+  resources :magic_sessions, path: "magic-session", param: :token
   # Define your application routes per the DSL in https://guides.rubyonrails.org/routing.html
 
   # Reveal health status on /up that returns 200 if the app boots with no exceptions, otherwise 500.