Đường Sỹ Hoàng · @hoangds · Son Do Hong · Son Do Hong · Van Hau Le · Son Do Hong
--- a/app/helpers/sessions_helper.rb
+++ b/app/helpers/sessions_helper.rb
  end
-  
-  # Returns the current logged-in user (if any)
+
+  # Remembers a user in a persistent session.
+  def remember(user)
+    user.remember
+    cookies.permanent.signed[:user_id] = user.id
+    cookies.permanent[:remember_token] = user.remember_token
+  end
+
+  # Returns the user corresponding to the remember token cookie.
  def current_user
-    if session[:user_id]
-      @current_user ||= User.find_by(id: session[:user_id])
+    if (user_id = session[:user_id])
--- a/app/models/user.rb
+++ b/app/models/user.rb
  
  has_secure_password

-  def User.digest(string)
-    cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
-    BCrypt::Password.create(string, cost: cost)
-  end
+  # Returns the hash digest of the given string. 
+    def User.digest(string)
+      cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
+      BCrypt::Password.create(string, cost: cost)
+    end
+
--- a/app/helpers/sessions_helper.rb
+++ b/app/helpers/sessions_helper.rb
+
+  # Remembers a user in a persistent session.
+  def remember(user)
+    user.remember
+    cookies.permanent.signed[:user_id] = user.id
+    cookies.permanent[:remember_token] = user.remember_token
+  end
+
+  # Returns the user corresponding to the remember token cookie.
  def current_user
-    if session[:user_id]
-      @current_user ||= User.find_by(id: session[:user_id])
+    if (user_id = session[:user_id])
+      @current_user ||= User.find_by(id: user_id)
+    elsif (user_id = cookies.signed[:user_id])
+      #raise # The tests still pass, so this branch is currently untested.
--- a/test/models/user_test.rb
+++ b/test/models/user_test.rb
  end

  test "password should be present (nonblank)" do
-    @user.password = @user.password_confirmation = " " * 6
+    @user.password = @user.password_confirmation = "" * 6
--- a/app/models/user.rb
+++ b/app/models/user.rb
 class User < ApplicationRecord
  VALID_EMAIL_REGEX = /\A[\w+\-.]+@[a-z\d\-.]+\.[a-z]+\z/i

+  attr_accessor :remember_token
--- a/app/models/user.rb
+++ b/app/models/user.rb
+class << self
+  # Returns the hash digest of the given string. 
+    def digest(string)
+      cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
+      BCrypt::Password.create(string, cost: cost)
+    end
+
+  # Returns a random token. 
+    def new_token
+      SecureRandom.urlsafe_base64
+    end
  end
+
+  # Remembers a user in the database for use in persistent sessions
+    def remember
+      self.remember_token = User.new_token
--- a/app/models/user.rb
+++ b/app/models/user.rb
+  # Returns the hash digest of the given string. 
+    def digest(string)
+      cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
+      BCrypt::Password.create(string, cost: cost)
+    end
+
+  # Returns a random token. 
+    def new_token
+      SecureRandom.urlsafe_base64
+    end
  end
+
+  # Remembers a user in the database for use in persistent sessions
+    def remember
+      self.remember_token = User.new_token
+      update_attribute(:remember_digest, User.digest(remember_token))
--- a/app/models/user.rb
+++ b/app/models/user.rb
+    def digest(string)
+      cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
+      BCrypt::Password.create(string, cost: cost)
+    end
+
+  # Returns a random token. 
+    def new_token
+      SecureRandom.urlsafe_base64
+    end
  end
+
+  # Remembers a user in the database for use in persistent sessions
+    def remember
+      self.remember_token = self.class.new_token
+      update_attribute(:remember_digest, self.class.digest(remember_token))
+      #BCrypt::Password.new(remember_digest).is_password?(remember_token)