class SocialStream::Oauth2Server::TokenEndpoint

Public Instance Methods

call(env) click to toggle source
# File lib/social_stream/oauth2_server/token_endpoint.rb, line 4
def call(env)
  authenticator.call(env)
end

Private Instance Methods

authenticator() click to toggle source
# File lib/social_stream/oauth2_server/token_endpoint.rb, line 10
def authenticator
  Rack::OAuth2::Server::Token.new do |req, res|
    client = Site::Client.find(req.client_id) || req.invalid_client!
    client.secret == req.client_secret || req.invalid_client!

    case req.grant_type
    when :authorization_code
      code = Oauth2Token::AuthorizationCode.valid.find_by_token(req.code)
      req.invalid_grant! if code.blank? || code.redirect_uri != req.redirect_uri

      res.access_token = code.access_token.to_bearer_token(:with_refresh_token)
    when :password
      user = User.find_for_authentication(email: req.username) || req.invalid_grant!
      user.valid_password?(req.password) || req.invalid_grant!

      res.access_token = user.access_tokens.create(:client => client).to_bearer_token(:with_refresh_token)
    when :client_credentials
      # NOTE: client is already authenticated here.
      res.access_token = client.access_tokens.create!.to_bearer_token
    when :refresh_token
      refresh_token = client.refresh_tokens.valid.find_by_token(req.refresh_token)
      req.invalid_grant! unless refresh_token
      res.access_token = refresh_token.access_tokens.create!.to_bearer_token
    else
      # NOTE: extended assertion grant_types are not supported yet.
      req.unsupported_grant_type!
    end
  end
end