filling in everything needed to login and view the account page, wheeeee.

cookbook/015/hodgepodge/app/controllers/application_controller.rb

@@ -1,3 +1,21 @@
 class ApplicationController < ActionController::Base
+  before_filter :set_user
   protect_from_forgery
+
+  protected
+    def set_user
+      @user = User.find(session[:id]) if @user.nil? && session[:id]
+    end
+
+    def login_required
+      return true if @user
+      access_denied
+      return false
+    end
+
+    def access_denied
+      session[:return_to] = request.request_uri
+      flash[:error] = 'Oops.  You need to login before you can view that page.'
+      redirect_to :controller => 'user', :action => 'login'
+    end
 end

cookbook/015/hodgepodge/app/controllers/user_controller.rb

@@ -1,11 +1,25 @@
 class UserController < ApplicationController
+  before_filter :login_required, :only => :my_account
+
   def login
+    @user = User.new
+    @user.username = params[:username]
   end
 
   def process_login
+    if user = User.authenticate(params[:user])
+      session[:id] = user.id
+      redirect_to session[:return_to] || '/'
+    else
+      flash[:error] = 'Invalid login.'
+      redirect_to :action => 'login', :username => params[:user][:username]
+    end
   end
 
   def logout
+    reset_session
+    flash[:message] = 'Logged out.'
+    redirect_to :action => 'login'
   end
 
   def my_account

cookbook/015/hodgepodge/app/models/user.rb

@@ -1,5 +1,5 @@
 class User < ActiveRecord::Base
-  validates_uniquness_of :username
+  validates_uniqueness_of :username
   validates_confirmation_of :password, :on => :create
   validates_length_of :password, :within => 5..40
 

cookbook/015/hodgepodge/app/views/user/login.html.erb

@@ -1,2 +1,14 @@
-<h1>User#login</h1>
+<% if @flash %>
-<p>Find me in app/views/user/login.html.erb</p>
+  <% if @flash[:message] %>
+    <div id="flash-message"><%= @flash[:message] %></div>
+  <% end %>
+  <% if @flash[:error] %>
+    <div id="flash-error"><%= @flash[:error] %></div>
+  <% end %>
+<% end %>
+
+<%= form_tag :action => 'process_login' do %>
+  <label for="username">Username:</label> <%= text_field "user", "username" %>&#x00A;
+  <label for="password">Password:</label> <%= password_field "user", "password" %>&#x00A;
+  <%= submit_tag %>
+<% end %>

cookbook/015/hodgepodge/app/views/user/my_account.html.erb

@@ -1,2 +1,3 @@
-<h1>User#my_account</h1>
+<h1>Account Info</h1>
-<p>Find me in app/views/user/my_account.html.erb</p>
+
+<p>Your username is <%= User.find(session[:id]).username %>