Question

I am using Devise in a rail app.

I have two models : User and Admin.

Currently, I am able to login as both User and Admin if i visit the User sign in and the admin sign in.

I would like to force a logout of one if the other signs in. What’s the best way to do that?

Also, if anyone has a good way to test that in rspec/capybara, please do share!

Thanks

Answer 1

I would copy over the Devise Controllers and add a before filter like so:

class Users::SessionsController < Devise::SessionsController

  before_filter :logout_admin, :only => "create"

  def create
    super
  end

  private

  def logout_admin
    # change :admin to :user in the admin's session controller
    # the sign_out is a devise controller helper that forces sign out
    sign_out :admin
  end

end

Then for the testing you can access the current user in functional(controller) specs by calling subject.current_user or subject.current_admin, go here: https://github.com/plataformatec/devise to make sure to include the test helpers then try something like this:

require 'spec_helper'

describe Users::SessionsController do
  login_admin

  describe "POST create" do
    it "should logout admin" do
      post :create, {:user => {:email => "[e-mail]", :password => "secret"} }
      subject.current_user.should_not be_nil
      subject.current_admin.should be_nil
    end
  end
end