class OpenID::Store::Mongo
Constants
- VERSION
Attributes
Public Class Methods
# File lib/openid/store/mongo.rb, line 17 def initialize(options = {}) self.collection = options[:collection] self.collection.ensure_index('expiry',{ :expireAfterSeconds => 0 }) end
Public Instance Methods
# File lib/openid/store/mongo.rb, line 78 def assoc_key(server_url, assoc_handle=nil) key = 'A' + server_url if assoc_handle key += '|' + assoc_handle end return key end
# File lib/openid/store/mongo.rb, line 89 def cleanup end
# File lib/openid/store/mongo.rb, line 92 def cleanup_associations end
# File lib/openid/store/mongo.rb, line 86 def cleanup_nonces end
Returns a Association object from storage that matches the server_url. Returns nil if no such association is found or if the one matching association is expired. (Is allowed to GC expired associations when found.)
# File lib/openid/store/mongo.rb, line 37 def get_association(server_url, handle=nil) doc = collection.find_one({:_id => assoc_key(server_url, handle)}) if doc return OpenID::Association.deserialize(doc['value']) else return nil end end
If there is a matching association, remove it from the store and return true, otherwise return false.
# File lib/openid/store/mongo.rb, line 48 def remove_association(server_url, handle) deleted = delete(assoc_key(server_url, handle)) server_assoc = get_association(server_url) if server_assoc && server_assoc.handle == handle deleted = delete(assoc_key(server_url)) | deleted end return deleted end
Put a Association object into storage. When implementing a store, don’t assume that there are any limitations on the character set of the server_url. In particular, expect to see unescaped non-url-safe characters in the server_url field.
# File lib/openid/store/mongo.rb, line 26 def store_association(server_url, association) [nil, association.handle].each do |handle| key = assoc_key(server_url, handle) collection.save({:_id => key, :value => association.serialize, :expiry => expiry(association.lifetime)}) end end
Return true if the nonce has not been used before, and store it for a while to make sure someone doesn’t try to use the same value again. Return false if the nonce has already been used or if the timestamp is not current. You can use OpenID::Store::Nonce::SKEW for your timestamp window. server_url: URL of the server from which the nonce originated timestamp: time the nonce was created in seconds since unix epoch salt: A random string that makes two nonces issued by a server in
the same second unique
# File lib/openid/store/mongo.rb, line 66 def use_nonce(server_url, timestamp, salt) return false if (timestamp - Time.now.to_i).abs > Nonce.skew ts = timestamp.to_s # base 10 seconds since epoch nonce_key = 'N' + server_url + '|' + ts + '|' + salt begin result = collection.insert({:_id=>nonce_key, :expiry => expiry(Nonce.skew + 5)}) return true rescue return false end end
Protected Instance Methods
# File lib/openid/store/mongo.rb, line 97 def delete(key) result = collection.remove({:_id => key}) end
Convert a lifetime in seconds into a expiry value
# File lib/openid/store/mongo.rb, line 102 def expiry(t) Time.now + t end