sessions_controller.rb

# This exists so that we can override some of the devise resource
class Users::SessionsController < Devise::SessionsController
  # before_action :configure_sign_in_params, only: [:create]
  layout "devise"
  before_action :check_failed_login
  before_action :sign_out_if_signed_in, only: [:create]
  skip_before_action :authorize_user
  skip_before_action :authenticate_user!
  # This one causes a redirect require_no_authentication
  skip_before_action :require_no_authentication

  # GET /resource/sign_in
  def new
    super
  end

  # POST /resource/sign_in
  def create
    super
    session[:current_role] ||= UsersRole.current_role_for(current_user)&.id
    UsersRole.set_last_role_for(current_user, @role)
  end

  # GET /resource/sign_out
  def sign_out_error_page
    sign_out(current_user) if user_signed_in?
    redirect_to root_path, notice: "Signed out successfully"
  end

  # DELETE /resource/sign_out
  # def destroy
  #   super
  # end

  # protected

  # If you have extra params to permit, append them to the sanitizer.
  # def configure_sign_in_params
  #   devise_parameter_sanitizer.permit(:sign_in, keys: [:attribute])
  # end

  private

  def sign_out_if_signed_in
    sign_out(current_user) if user_signed_in?
  end

  def check_failed_login
    @failed_login = (options = request.env["warden.options"]) && options[:action] == "unauthenticated" && options[:message] == :not_found_in_database
  end
end