Module: SessionManagement

Defined in:
lib/lobby_boy/patches/session_management.rb

Instance Method Summary collapse

Instance Method Details

#access_token ⇒ Object 



19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/lobby_boy/patches/session_management.rb', line 19

def access_token
  return super unless LobbyBoy.configured?

  at = super

  @id_token ||= begin
    session_state = request.params['session_state']
    id_token = ::LobbyBoy::OpenIDConnect::IdToken.new at.id_token
    env['lobby_boy.id_token'] = id_token

    if session_state
      cookie = {
          state: session_state,
          expires_at: id_token.exp
      }

      env['lobby_boy.cookie'] = {
          value: cookie.to_json,
          expires: id_token.expires_in.seconds.from_now,
          domain: LobbyBoy.client.cookie_domain
      }

      id_token
    end
  end

  at
end

#authorize_uri ⇒ Object

Always append ‘prompt=none’ to every authorization request to make the login automatic if possible.



9
10
11
12
13
14
15
16
17
 
# File 'lib/lobby_boy/patches/session_management.rb', line 9

def authorize_uri
  return super unless LobbyBoy.configured?

  LobbyBoy::Util::URI.add_query_params(
    super,
    prompt: request.params['prompt'] || options.prompt || 'none',
    id_token_hint: request.params['id_token_hint']
  )
end