<p>By default, Acts as Authenticated will store the id of the user object in the session, not the whole object. This ensures that your session is never stale, but it costs an extra db query per request. Here’s how to modify the Authenticated System module to store the whole user object:</p>
<ol>
<li>Accesses the current <%= file_name %> from the session.<br />
def current_user<br />
session[:user]<br />
end</li>
</ol>
<ol>
<li>Store the given user in the session.<br />
def current_user=(new_user)<br />
session[:user] = new_user<br />
end</li>
</ol>
<p>And to make tests work, you need to change this in lib/authenticated_test_helper:</p>
<ol>
<li>remove .id from users(users)<br />
def login_as(user)<br />
@request.session[:user] = user ? users(user) : nil<br />
end</li>
</ol>
<p>Or if you also plan to use userstamp do this instead:<br />
applicaton.rb should resemble:</p>
<p>class ApplicationController < ActionController::Base<br />
include AuthenticatedSystem<br />
before_filter do |c|<br />
if !c.session[:user].nil?<br />
User.current_user = c.session[:user]<br />
end<br />
end<br />
end</p>
<p>Add this line to user.rb model:</p>
cattr_accessor :current_user
<p>Changed portion of lib/authenticated_system.rb:</p>
<ol>
<li>Preloads <code>current_user with the user model if they're logged in.
def logged_in?
(</code>current_user ||= session[:user_id] ? User.find_by_id(session[:user_id]) : :false).is_a?(User)<br />
end</li>
</ol>
<ol>
<li>Accesses the current user from the session.<br />
def current_user<br />
@current_user if logged_in?<br />
end</li>
</ol>
<ol>
<li>Store the given user in the session.<br />
def current_user=(new_user)<br />
session[:user] = new_user<br />
session[:user_id] = new_user.nil? ? nil : new_user.id<br />
@current_user = new_user<br />
end</li>
</ol>
<p>Changed portion of lib/authenticated_test_helper.rb:</p>
<ol>
<li>Sets the current user in the session from the user fixtures.<br />
def login_as(user)<br />
@request.session[:user_id] = user ? users(user).id : nil<br />
end</li>
</ol>
<p>Changed portion of test/funtional/account_controller_test.rb:</p>
def test_should_login_and_redirect
post :login, :login => ‘quentin’, :password => ‘test’
assert session[:user]
assert session[:user_id]
assert_response :redirect
end
def test_should_fail_login_and_not_redirect
post :login, :login => ‘quentin’, :password => ‘bad password’
assert_nil session[:user]
assert_nil session[:user_id]
assert_response :success
end
<p>And further on down the same file:</p>
def test_should_logout
login_as :quentin
get :logout
assert_nil session[:user]
assert_nil session[:user_id]
assert_response :redirect
end
2008-10-24T03:35:15-07:00
71684
storing-the-user-model-in-the-session
67186
Storing the User Model in the Session
2008-10-24T03:35:15-07:00
30799