override_content_security_policy_directives(:form_action => []) if Settings.csp_enforce || Settings.key?(:csp_report_url)
session[:referer] = safe_referer(params[:referer]) if params[:referer]
+
+ parse_oauth_referer session[:referer]
end
def create
session[:remember_me] ||= params[:remember_me]
session[:referer] = safe_referer(params[:referer]) if params[:referer]
- password_authentication(params[:username], params[:password])
+ password_authentication(params[:username].strip, params[:password])
end
def destroy
@title = t ".title"
if request.post?
- if session[:token]
- token = UserToken.find_by(:token => session[:token])
- token&.destroy
- session.delete(:token)
- end
-
+ session.delete(:pending_user)
session.delete(:user)
session_expires_automatically