pulibrary / oawaiver / 40ca2f09-e694-44a5-b909-7cce179b9e67

class Account < ApplicationRecord

  ADMIN_ROLE = "ADMIN"

  AUTHENTICATED_ROLE = "LOGGEDIN"

  ANONYMOUS_ROLE = "ANONYMOUS"

  validates_presence_of :netid

  validates_uniqueness_of :netid

  delegate :to_s, to: :netid

  devise(:omniauthable, omniauth_providers: [:cas])

  def self.roles(netid)

    persisted = Account.find_by_netid(netid)

    return persisted.roles if persisted

    [ANONYMOUS_ROLE]

  end

  def self.from_omniauth(access_token)

    return if access_token.nil?

    models = where(provider: access_token.provider, netid: access_token.uid)

    models.first_or_create do |account|

      account.netid = access_token.uid

      account.provider = access_token.provider

      account.role = AUTHENTICATED_ROLE

    end

  end

  def uid

    netid

  end

  def admin?

    role == ADMIN_ROLE

  end

  def roles

    values = if netid

               [AUTHENTICATED_ROLE]

             else

               [ANONYMOUS_ROLE]

             end

    values << ADMIN_ROLE if admin?

    values

  end

  def authenticated?

    roles.include?(AUTHENTICATED_ROLE)

  end

  def email

    "#{netid}@princeton.edu"

  end

end