callback

in app/controllers/user_sessions_controller.rb [22:42]


  def callback
    unless is_oauth_state_valid?(params[:state])
      redirect_to new_user_sessions_path
      return
    end

    token = client.auth_code.get_token(params[:code], redirect_uri: callback_user_sessions_url).token
    
    @user_session = UserSession.new
    user = @user_session.authenticate(access_token: token)

    if user && sign_in(user)
      return_to = get_ouath_state_return_to(params[:state])
      redirect_to(return_to || root_path)
    else
      @error = 'Invalid credentials'
      render :new
    end
    
  end