orbit4-5/app/controllers/sessions_controller.rb

23 lines
512 B
Ruby

class SessionsController < ApplicationController
layout "authentication"
def new
end
def create
user = User.find_by(user_name: params[:user_name])
if user && user.authenticate(params[:password])
session[:user_id] = user.id
redirect_to admin_dashboards_path, :notice => "Logged in!"
else
flash.now.alert = "Invalid email or password"
render "new"
end
end
def destroy
session[:user_id] = nil
redirect_to root_url, :notice => "Logged out!"
end
end