class SocialStream::Oauth2Server::TokenEndpoint
Public Instance Methods
call(env)
click to toggle source
# File lib/social_stream/oauth2_server/token_endpoint.rb, line 4 def call(env) authenticator.call(env) end
Private Instance Methods
authenticator()
click to toggle source
# File lib/social_stream/oauth2_server/token_endpoint.rb, line 10 def authenticator Rack::OAuth2::Server::Token.new do |req, res| client = Site::Client.find(req.client_id) || req.invalid_client! client.secret == req.client_secret || req.invalid_client! case req.grant_type when :authorization_code code = Oauth2Token::AuthorizationCode.valid.find_by_token(req.code) req.invalid_grant! if code.blank? || code.redirect_uri != req.redirect_uri res.access_token = code.access_token.to_bearer_token(:with_refresh_token) when :password user = User.find_for_authentication(email: req.username) || req.invalid_grant! user.valid_password?(req.password) || req.invalid_grant! res.access_token = user.access_tokens.create(:client => client).to_bearer_token(:with_refresh_token) when :client_credentials # NOTE: client is already authenticated here. res.access_token = client.access_tokens.create!.to_bearer_token when :refresh_token refresh_token = client.refresh_tokens.valid.find_by_token(req.refresh_token) req.invalid_grant! unless refresh_token res.access_token = refresh_token.access_tokens.create!.to_bearer_token else # NOTE: extended assertion grant_types are not supported yet. req.unsupported_grant_type! end end end