mastodon/app/controllers/admin/users/sign_in_token_authentications_controller.rb

# frozen_string_literal: true

module Admin
  class Users::SignInTokenAuthenticationsController < BaseController
    before_action :set_target_user

    def create
      authorize @user, :enable_sign_in_token?
      @user.enable_sign_in_token!
      log_action :enable_sign_in_token, @user
      redirect_to admin_account_path(@user.account_id)
    end

    def destroy
      authorize @user, :disable_sign_in_token?
      @user.disable_sign_in_token!
      log_action :disable_sign_in_token, @user
      redirect_to admin_account_path(@user.account_id)
    end

    private

    def set_target_user
      @user = User.find(params[:user_id])
    end
  end
end