{"push_id":1286131012,"size":1,"distinct_size":1,"ref":"refs/heads/fix/redirect-unauthed-to-sign-in","head":"c569d19df5b693e55de9f96375124a5eadabb3df","before":"6fafa2a4071f6315b79efb3fe306d2921cc02f50","commits":[{"sha":"c569d19df5b693e55de9f96375124a5eadabb3df","author":{"name":"James Sadler","email":"99b22a03c08e993783648cd144cfb0ddab51b9bc@gmail.com"},"message":"SITES-656 redirect authentication failures to /users/sign_in\n\nAuthentication behaviour is now handled by using the AccessDeniedConcern\nin appropriate controllers. This centralises the behaviour for\nconsitency. The behaviour is:\n\n- When a user is not authenticated:\n\n  If they try to access a page that requires authorisation they will be\n  redirected to /users/sign_in\n\n  If it's a public page the request will succeed\n\n- When a user is authenticated:\n\n  If the user is also authorised the request will succeed.\n  If they are not authorised the request will fail with a 401.\n\nThe flash messages are also set by the helper.\n\nI deleted some of the specs for various controllers that were testing\nthe very rudimentary behaviour of how authentication and authorisation\nfailures were handled.  The basics are now tested in the spec for the\nAccessDeniedConcern itself so I removed the duplication.","distinct":true,"url":"https://api.github.com/repos/AusDTO/gov-au-beta/commits/c569d19df5b693e55de9f96375124a5eadabb3df"}]}
{"actor":{"display_login":"freshtonic"}}