Check if user is authenticated before visiting the home page

Co-authored-by: Cait <[email protected]>
Co-authored-by: Efua Akumanyi <[email protected]>

app/controllers/application_controller.rb

@@ -1,2 +1,5 @@
 class ApplicationController < ActionController::Base
+  def new_session_path(scope)
+    new_user_session_path
+  end
 end

app/controllers/home_controller.rb

@@ -1,5 +1,6 @@
 class HomeController < ApplicationController
+  before_action :authenticate_user!
+
   def show
-    render body: "Hello from Staff Device"
   end
-end
+end

app/controllers/users/omniauth_callbacks_controller.rb

@@ -0,0 +1,14 @@
+class Users::OmniauthCallbacksController < Devise::OmniauthCallbacksController
+  def cognito_idp
+    @user = User.from_omniauth(request.env["omniauth.auth"])
+
+    if @user.persisted?
+      sign_in_and_redirect @user, event: :authentication #this will throw if @user is not activated
+      set_flash_message(:notice, :success, kind: "Cognito IDP") if is_navigational_format?
+    end
+  end
+
+  def failure
+    redirect_to root_path
+  end
+end

app/models/user.rb

@@ -2,4 +2,8 @@ class User < ApplicationRecord
   # Include default devise modules. Others available are:
   # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable
   devise :omniauthable, omniauth_providers: %i[cognito-idp]
-end
+
+  def from_omniauth(auth)
+    where(provider: auth.provider, uid: auth.uid).first_or_create
+  end
+end

app/views/devise/sessions/new.html.erb

@@ -0,0 +1,3 @@
+<h2>Log in</h2>
+
+<%= link_to "Sign in with Cognito", user_cognito_idp_omniauth_authorize_path %>

app/views/home/show.html.erb

@@ -0,0 +1,3 @@
+<p>Hello from Staff Device</p>
+
+<%= link_to "Logout", destroy_user_session_path, method: :delete %>

config/routes.rb

@@ -1,5 +1,10 @@
 Rails.application.routes.draw do
-  devise_for :users
+  devise_for :users, :controllers => { :omniauth_callbacks => "users/omniauth_callbacks" }
+  devise_scope :user do
+    get 'sign_in', :to => 'devise/sessions#new', :as => :new_user_session
+    delete 'sign_out', :to => 'devise/sessions#destroy', :as => :destroy_user_session
+  end
+
   get "/healthcheck", to: "monitoring#healthcheck"
   root "home#show"
 end