hello-learning/bookstore/app/controllers/sessions_controller.rb
2019-10-10 10:15:45 -05:00

24 lines
594 B
Ruby

class SessionsController < ApplicationController
def new
# @session = @session.reviews.build
end
def create
user = User.find_by(username: params[:session][:username])
if user && user.authenticate(params[:session][:password])
flash[:notice] = "Welcome back, #{user.username}!"
session[:user_id] = user.id
redirect_to root_path
else
flash[:alert] = "Sorry, your username or password is invalid."
render :new
end
end
def destroy
session[:user_id] = nil
flash[:notice] = "See ya next time!"
redirect_to root_path
end
end