implantação da fase 2 e 3

app/controllers/users/sessions_controller.rb

@@ -0,0 +1,56 @@
+# app/controllers/users/sessions_controller.rb
+class Users::SessionsController < Devise::SessionsController
+  before_action :configure_sign_in_params, only: [:create]
+
+  # GET /users/sign_in
+  def new
+    @pin_login = params[:pin].present?
+    super
+  end
+
+  # POST /users/sign_in
+  def create
+    # PIN login para motoristas
+    if params[:pin_login].present?
+      handle_pin_login
+    else
+      super
+    end
+  end
+
+  protected
+
+  def after_sign_in_path_for(resource)
+    case resource.role
+    when 'motorista'
+      motorista_path
+    else
+      dashboard_path
+    end
+  end
+
+  def after_sign_out_path_for(resource_or_scope)
+    new_user_session_path
+  end
+
+  def configure_sign_in_params
+    devise_parameter_sanitizer.permit(:sign_in, keys: [:email, :password, :pin])
+  end
+
+  private
+
+  def handle_pin_login
+    pin = params[:user][:pin].to_s.strip
+    user = User.find_by(pin_acesso: pin, role: 'motorista')
+
+    if user&.active?
+      sign_in(user)
+      AuditoriaLog.registrar(user, 'login_pin', request.remote_ip)
+      redirect_to motorista_path, notice: "Bem-vindo, #{user.nome_display}!"
+    else
+      flash.now[:alert] = 'PIN inválido ou motorista inativo.'
+      @pin_login = true
+      render :new, status: :unprocessable_entity
+    end
+  end
+end