Change Registrations to use Pow

registrations/config/config.exs

@@ -34,6 +34,18 @@ import_config "#{Mix.env()}.exs"
 # Use Jason for JSON parsing in Phoenix
 config :phoenix, :json_library, Jason
 
+config :registrations, :pow,
+  web_mailer_module: RegistrationsWeb,
+  extensions: [PowResetPassword],
+  controller_callbacks: Pow.Extension.Phoenix.ControllerCallbacks,
+  web_module: RegistrationsWeb,
+  user: RegistrationsWeb.User,
+  repo: Registrations.Repo,
+  routes_backend: RegistrationsWeb.Pow.Routes,
+  mailer_backend: Registrations.Mailer,
+  messages_backend: RegistrationsWeb.Pow.Messages,
+  users_context: RegistrationsWeb.Pow.Users
+
 # Configure phoenix generators
 config :phoenix, :generators,
   migration: true,

registrations/lib/registrations/mailer.ex

@@ -1,13 +1,39 @@
 defmodule Registrations.Mailer do
+  use Pow.Phoenix.Mailer
   use Swoosh.Mailer, otp_app: :registrations
+
   import Swoosh.Email
   import RegistrationsWeb.SharedHelpers
 
-  alias RegistrationsWeb.Router
-  alias RegistrationsWeb.Endpoint
+  require Logger
 
   @from "[email protected]"
 
+  @impl true
+  def cast(%{user: user, subject: subject, text: text, html: html}) do
+    %Swoosh.Email{}
+    |> to({"", user.email})
+    |> from(adventure_from())
+    |> subject("[#{phrase("email_title")}] #{subject}")
+    |> html_body(html)
+    |> text_body(text)
+  end
+
+  @impl true
+  def process(email) do
+    # An asynchronous process should be used here to prevent enumeration
+    # attacks. Synchronous e-mail delivery can reveal whether a user already
+    # exists in the system or not.
+
+    Task.start(fn ->
+      email
+      |> deliver()
+      |> log_warnings()
+    end)
+
+    :ok
+  end
+
   def send_welcome_email(email) do
     new()
     |> to(email)
@@ -47,6 +73,8 @@ defmodule Registrations.Mailer do
     |> deliver
   end
 
+  @spec send_registration(atom() | %{:email => any(), optional(any()) => any()}) ::
+          {:error, any()} | {:ok, any()}
   def send_registration(user) do
     new()
     |> to(adventure_from())
@@ -82,19 +110,6 @@ defmodule Registrations.Mailer do
     |> deliver
   end
 
-  @spec send_password_reset(atom | %{:email => any, :recovery_hash => any, optional(any) => any}) ::
-          {:error, any} | {:ok, any}
-  def send_password_reset(user) do
-    new()
-    |> to(user.email)
-    |> from(adventure_from())
-    |> subject("[#{phrase("email_title")}] Password reset")
-    |> html_body(
-      "Here is a <a href='#{Router.Helpers.reset_url(Endpoint, :edit, user.recovery_hash)}'>password reset link</a>"
-    )
-    |> deliver
-  end
-
   defp welcome_html do
     Phoenix.View.render_to_string(
       RegistrationsWeb.EmailView,
@@ -164,4 +179,10 @@ defmodule Registrations.Mailer do
       _ -> "From: #{message.from_name} <#{message.from_address}>"
     end
   end
+
+  defp log_warnings({:error, reason}) do
+    Logger.warning("Mailer backend failed with: #{inspect(reason)}")
+  end
+
+  defp log_warnings({:ok, response}), do: {:ok, response}
 end

registrations/lib/registrations_web.ex

@@ -35,6 +35,8 @@ defmodule RegistrationsWeb do
       import Ecto.Query, only: [from: 1, from: 2]
 
       alias RegistrationsWeb.Router.Helpers, as: Routes
+
+      import RegistrationsWeb.Pow.ControllerHelper
     end
   end
 
@@ -82,6 +84,15 @@ defmodule RegistrationsWeb do
     end
   end
 
+  def mailer_view do
+    quote do
+      use Phoenix.View, root: "lib/registrations_web/templates",
+                        namespace: RegistrationsWeb
+
+      use Phoenix.HTML
+    end
+  end
+
   def router do
     quote do
       use Phoenix.Router

registrations/lib/registrations_web/controllers/message_controller.ex

@@ -68,7 +68,7 @@ defmodule RegistrationsWeb.MessageController do
 
     users =
       if(me == "true",
-        do: [conn.assigns[:current_user_object]],
+        do: [conn.assigns[:current_user]],
         else: Repo.all(RegistrationsWeb.User)
       )
       |> Repo.preload(team: [:users])

registrations/lib/registrations_web/controllers/user_controller.ex

@@ -27,7 +27,7 @@ defmodule RegistrationsWeb.UserController do
 
   def edit(conn, _) do
     users = Repo.all(User)
-    current_user_only = conn.assigns[:current_user_object]
+    current_user_only = Repo.get_by(User, email: conn.assigns[:current_user].email)
     changeset = User.details_changeset(current_user_only)
 
     current_user = Repo.preload(current_user_only, team: [:users])
@@ -55,7 +55,7 @@ defmodule RegistrationsWeb.UserController do
 
   def update(conn, %{"user" => user_params}) do
     users = Repo.all(User)
-    current_user = conn.assigns[:current_user_object]
+    current_user = conn.assigns[:current_user]
     changeset = User.details_changeset(current_user, user_params)
 
     current_user = Repo.preload(current_user, team: [:users])
@@ -79,15 +79,16 @@ defmodule RegistrationsWeb.UserController do
   end
 
   def voicepass(conn, _params) do
-    current_user = conn.assigns[:current_user_object]
+    current_user = conn.assigns[:current_user]
 
     lines = User.voicepass_candidates()
     random_index = :rand.uniform(length(lines))
     new_voicepass = Enum.at(lines, random_index)
 
     changeset = User.voicepass_changeset(current_user, %{voicepass: new_voicepass})
 
-    Repo.update(changeset)
+    {:ok, new_user} = Repo.update(changeset)
+    conn = sync_user(conn, new_user)
 
     json(conn, %{data: %{voicepass: new_voicepass}})
   end

registrations/lib/registrations_web/endpoint.ex

@@ -43,5 +43,7 @@ defmodule RegistrationsWeb.Endpoint do
     max_age: 60 * 60 * 24 * 365
   )
 
+  plug(Pow.Plug.Session, otp_app: :registrations)
+
   plug(RegistrationsWeb.Router)
 end