blob: 522b1fd2f6706ab562fe09181ae888420fde4ef3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
define([
'underscore',
'backbone'
], function(_, Backbone) {
var SessionModel = Backbone.Model.extend({
urlRoot: '/session',
initialize: function () {
var that = this;
// Hook into jquery
// Use withCredentials to send the server cookies
// The server must allow this through response headers
$.ajaxPrefilter( function( options, originalOptions, jqXHR ) {
options.xhrFields = {
withCredentials: true
};
// If we have a csrf token send it through with the next request
if(typeof that.get('_csrf') !== 'undefined') {
jqXHR.setRequestHeader('X-CSRF-Token', that.get('_csrf'));
}
});
},
login: function(creds) {
// Do a POST to /session and send the serialized form creds
this.save(creds, {
success: function () {}
});
},
logout: function() {
// Do a DELETE to /session and clear the clientside data
var that = this;
this.destroy({
success: function (model, resp) {
model.clear()
// Set auth to false to trigger a change:auth event
// The server also returns a new csrf token so that
// the user can relogin without refreshing the page
that.set({auth: false, _csrf: resp._csrf});
}
});
},
getAuth: function(callback) {
// getAuth is wrapped around our router
// before we start any routers let us see if the user is valid
this.fetch({
success: callback
});
}
});
return new SessionModel();
});
|
