12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849 |
- # frozen_string_literal: true
- class Settings::DeletesController < Settings::BaseController
- skip_before_action :require_functional!
- before_action :require_not_suspended!
- before_action :check_enabled_deletion
- def show
- @confirmation = Form::DeleteConfirmation.new
- end
- def destroy
- if challenge_passed?
- destroy_account!
- redirect_to new_user_session_path, notice: I18n.t('deletes.success_msg')
- else
- redirect_to settings_delete_path, alert: I18n.t('deletes.challenge_not_passed')
- end
- end
- private
- def check_enabled_deletion
- redirect_to root_path unless Setting.open_deletion
- end
- def resource_params
- params.require(:form_delete_confirmation).permit(:password, :username)
- end
- def require_not_suspended!
- forbidden if current_account.suspended?
- end
- def challenge_passed?
- if current_user.encrypted_password.blank?
- current_account.username == resource_params[:username]
- else
- current_user.valid_password?(resource_params[:password])
- end
- end
- def destroy_account!
- current_account.suspend!(origin: :local, block_email: false)
- AccountDeletionWorker.perform_async(current_user.account_id)
- sign_out
- end
- end
|