pulibrary / orangelight / 0e37073d-109c-440c-949f-49d2aa86311b

class ApplicationController < ActionController::Base

  include Blacklight::Controller

  layout 'application'

  protect_from_forgery with: :exception

  def after_sign_in_path_for(resource)

    stored_location = stored_location_for(resource)

    if referrer.present? && referrer.exclude?("sign_in") && !origin&.include?("redirect-to-alma")

      referrer

    elsif origin.present?

      request.flash.delete('alert')

      request.flash.keep('notice')

      origin.chomp('/email')

    elsif !request.env['omniauth.origin'].nil? &&

          /request|borrow-direct|email|bookmarks|search_history|redirect-to-alma/.match(request.env['omniauth.origin'])

      referrer_from_url(request.env['omniauth.origin'])

    elsif stored_location.present?

      stored_location

    else

      account_path

    end

  end

  def referrer

    @referrer ||= params[:url] || request.referer

  end

  def origin

    @origin ||= begin

      return params[:origin] if params[:origin].present?

      if referrer.present? && referrer.include?("origin")

        referrer_params = Rack::Utils.parse_query URI.parse(referrer).query

        return referrer_params["origin"]

      end

    end

  end

  def after_sign_out_path_for(resource)

    if resource == 'barcode' || resource == "alma"

      root_url

    else

      Rails.configuration.x.after_sign_out_url

    end

  end

  def default_url_options

    Rails.env.production? || Rails.env.staging? ? { protocol: 'https' } : {}

  end

  private

    def verify_admin!

      authenticate_user!

      head :forbidden unless current_user.admin?

    end

    def referrer_from_url(url)

      query = URI.parse(url).query

      if query

        CGI.parse(query).try(:[], "referer")&.first

      else

        url

      end

    end

    before_action do

      Rack::MiniProfiler.authorize_request if current_user&.admin?

    end

end