Commit 2b22187

@@ -1,6 +1,7 @@
 class ApplicationController < ActionController::Base
   include SamlRespondable
   protect_from_forgery with: :exception
+  before_action :authenticate!
 
   def render_error(status, model: nil)
     @model = model
@@ -18,4 +19,10 @@ class ApplicationController < ActionController::Base
   def current_user?
     current_user.present?
   end
+
+  private
+
+  def authenticate!
+    redirect_to new_session_path unless current_user?
+  end
 end

@@ -1,5 +1,6 @@
 class MetadataController < ApplicationController
   force_ssl if: :ssl_configured?
+  skip_before_action :authenticate!
 
   def show
     render xml: to_xml, content_type: "application/samlmetadata+xml"

@@ -1,4 +1,6 @@
 class RegistrationsController < ApplicationController
+  skip_before_action :authenticate!
+
   def new
     @user = User.new
   end

@@ -1,5 +1,6 @@
 class SessionsController < ApplicationController
   skip_before_action :verify_authenticity_token, only: [:new, :destroy]
+  skip_before_action :authenticate!, only: [:new, :create, :destroy]
 
   def new
     binding = binding_for(request.post? ? :http_post : :http_redirect, new_session_url)