Prevent submission if password not added

app/controllers/profiles_controller.rb

@@ -65,7 +65,7 @@ def params_user
     end
   end
 
-  PERMITTED_PROFILE_PARAMS = %i[handle twitter_username unconfirmed_email public_email full_name].freeze
+  PERMITTED_PROFILE_PARAMS = %i[handle twitter_username unconfirmed_email homepage_url public_email full_name].freeze
 
   def verify_password
     password = params.permit(user: :password).require(:user)[:password]

app/controllers/users_controller.rb

@@ -27,6 +27,7 @@ def create
     password
     website
     twitter_username
+    homepage_url
     full_name
   ].freeze
 

app/models/user.rb

@@ -82,6 +82,8 @@ class User < ApplicationRecord
     message: "can only contain letters, numbers, and underscores"
   }, allow_nil: true, length: { within: 0..20 }
 
+  validates_formatting_of :homepage_url, using: :url, allow_blank: true
+
   validates :password,
     length: { minimum: 10 },
     unpwn: true,
@@ -351,7 +353,7 @@ def clear_personal_attributes
       handle: nil, email_confirmed: false,
       unconfirmed_email: nil, blocked_email: nil,
       api_key: nil, confirmation_token: nil, remember_token: nil,
-      twitter_username: nil, webauthn_id: nil, full_name: nil,
+      twitter_username: nil, webauthn_id: nil, full_name: nil, homepage_url: nil,
       totp_seed: nil, mfa_hashed_recovery_codes: nil,
       mfa_level: :disabled,
       password: SecureRandom.hex(20).encode("UTF-8")

app/views/dashboards/_subject.html.erb

@@ -23,6 +23,17 @@
   </div>
 <% end %>
 
+<% if user.homepage_url.present? %>
+  <div class="flex items-center mb-4 text-b3 lg:text-b2">
+    <%= icon_tag("link", color: :primary, class: "w-6 text-orange mr-3") %>
+    <p class="text-neutral-800 dark:text-white"><%=
+      link_to(
+        user.homepage_url
+      )
+    %></p>
+  </div>
+<% end %>
+
 <% if user.twitter_username.present? %>
   <div class="flex items-center mb-4 text-b3 lg:text-b2">
     <%= icon_tag("x-twitter", color: :primary, class: "w-6 text-orange mr-3") %>

app/views/owners/edit.html.erb

@@ -16,6 +16,6 @@
   </div>
 
   <div class="submit_field">
-    <%= submit_tag 'Update', :data => {:disable_with => t('form_disable_with')}, :class => 'form__submit' %>
+    <%= submit_tag 'Update', :data => {:disable_with => t('form_disable_with')}, :class => 'form__submit', required: true %>
   </div>
 <% end %>

app/views/profiles/edit.html.erb

@@ -20,6 +20,11 @@
     <%= form.text_field :handle, :class => 'form__input' %>
   </div>
 
+  <div class="text_field">
+   <%= form.label :homepage_url, class: 'form__label' %>
+   <%= form.text_field(:homepage_url, class: 'form__input') %>
+  </div>
+
   <div class="text_field">
     <%= form.label :twitter_username, class: 'form__label form__label__icon-container' do %>
       <%=
@@ -66,7 +71,7 @@
     <p class='form__field__instructions'>
       <%= t('.enter_password') %>
     </p>
-    <%= form.password_field :password, autocomplete: 'current-password', class: 'form__input' %>
+    <%= form.password_field :password, autocomplete: 'current-password', class: 'form__input', required: true %>
   </div>
 
 

app/views/profiles/show.html.erb

@@ -94,6 +94,15 @@
             )
           %>
         <% end %>
+        <% if @user.homepage_url.present? %>
+          <%=
+            link_to(
+              @user.homepage_url,
+              rel: "nofollow",
+              class: "profile__header__attribute t-link--black"
+            )
+          %>
+        <% end %>
       <% end %>
     </div>
 

db/migrate/20241114211431_add_homepage_url_to_users.rb

@@ -0,0 +1,5 @@
+class AddHomepageUrlToUsers < ActiveRecord::Migration[7.2]
+  def change
+    add_column :users, :homepage_url, :string
+  end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.2].define(version: 2024_11_04_065953) do
+ActiveRecord::Schema[7.2].define(version: 2024_11_14_211431) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "hstore"
   enable_extension "pgcrypto"
@@ -556,6 +556,7 @@
     t.string "mfa_hashed_recovery_codes", default: [], array: true
     t.boolean "public_email", default: false, null: false
     t.datetime "deleted_at"
+    t.string "homepage_url"
     t.index "lower((email)::text) varchar_pattern_ops", name: "index_users_on_lower_email"
     t.index ["email"], name: "index_users_on_email"
     t.index ["handle"], name: "index_users_on_handle"

test/integration/profile_test.rb

@@ -133,6 +133,21 @@ def sign_out
     assert page.has_link?("@nick1", href: "https://twitter.com/nick1")
   end
 
+  test "adding homepage url" do
+    sign_in
+    visit profile_path("nick1")
+
+    click_link "Edit Profile"
+    fill_in "user_homepage_url", with: "https://nickisawesome.com"
+    fill_in "Password", with: PasswordHelpers::SECURE_TEST_PASSWORD
+    click_button "Update"
+
+    click_link "Sign out"
+    visit profile_path("nick1")
+
+    assert page.has_link?("https://nickisawesome.com")
+  end
+
   test "deleting profile" do
     sign_in
     visit profile_path("nick1")