|
@ -10,7 +10,6 @@ class Auth::SessionsController < Devise::SessionsController |
|
|
prepend_before_action :authenticate_with_two_factor, if: :two_factor_enabled?, only: [:create] |
|
|
prepend_before_action :authenticate_with_two_factor, if: :two_factor_enabled?, only: [:create] |
|
|
before_action :set_instance_presenter, only: [:new] |
|
|
before_action :set_instance_presenter, only: [:new] |
|
|
before_action :set_body_classes |
|
|
before_action :set_body_classes |
|
|
after_action :clear_site_data, only: [:destroy] |
|
|
|
|
|
|
|
|
|
|
|
def new |
|
|
def new |
|
|
Devise.omniauth_configs.each do |provider, config| |
|
|
Devise.omniauth_configs.each do |provider, config| |
|
@ -125,14 +124,6 @@ class Auth::SessionsController < Devise::SessionsController |
|
|
paths |
|
|
paths |
|
|
end |
|
|
end |
|
|
|
|
|
|
|
|
def clear_site_data |
|
|
|
|
|
return if continue_after? |
|
|
|
|
|
|
|
|
|
|
|
# Should be '"*"' but that doesn't work in Chrome (neither does '"executionContexts"') |
|
|
|
|
|
# https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data |
|
|
|
|
|
response.headers['Clear-Site-Data'] = '"cache", "cookies", "storage"' |
|
|
|
|
|
end |
|
|
|
|
|
|
|
|
|
|
|
def continue_after? |
|
|
def continue_after? |
|
|
truthy_param?(:continue) |
|
|
truthy_param?(:continue) |
|
|
end |
|
|
end |
|
|