370ed32426
Fix an `undefined method 'find' for Maintenance::User:Module` exception when disabling email notifications using the "Disable notifications" link in dmails.
38 lines
972 B
Ruby
38 lines
972 B
Ruby
# frozen_string_literal: true
|
|
|
|
module Maintenance
|
|
module User
|
|
class EmailNotificationsController < ApplicationController
|
|
class VerificationError < StandardError; end
|
|
|
|
respond_to :html, :json, :xml
|
|
|
|
before_action :validate_sig, :only => [:destroy]
|
|
rescue_from VerificationError, with: :render_verification_error
|
|
|
|
def show
|
|
end
|
|
|
|
def destroy
|
|
@user = ::User.find(params[:user_id])
|
|
@user.update!(receive_email_notifications: false)
|
|
respond_with(@user)
|
|
end
|
|
|
|
private
|
|
|
|
def render_verification_error
|
|
render plain: "", status: 403
|
|
end
|
|
|
|
def validate_sig
|
|
verifier = ActiveSupport::MessageVerifier.new(Danbooru.config.email_key, digest: "SHA256", serializer: JSON)
|
|
calculated_sig = verifier.generate(params[:user_id].to_s)
|
|
if calculated_sig != params[:sig]
|
|
raise VerificationError, "Invalid signature"
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|