Class: OAuth2::Router

Inherits:
Object
  • Object
show all
Defined in:
lib/oauth2/router.rb

Class Method Summary collapse

Class Method Details

.access_token(resource_owner, scopes, request, params = nil) ⇒ Object 



44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'lib/oauth2/router.rb', line 44

def self.access_token(resource_owner, scopes, request, params = nil)
  params ||= request.params
  header = request.env['HTTP_AUTHORIZATION']
  
  access_token = header && header =~ /^OAuth\s+/ ?
                 header.gsub(/^OAuth\s+/, '') :
                 params[OAUTH_TOKEN]
  
  Provider::AccessToken.new(resource_owner,
                            scopes,
                            access_token,
                            transport_error(request))
end

.auth_params(request, params = nil) ⇒ Object 



6
7
8
9
10
11
 
# File 'lib/oauth2/router.rb', line 6

def self.auth_params(request, params = nil)
  return {} unless basic = request.env['HTTP_AUTHORIZATION']
  parts = basic.split(/\s+/)
  username, password = Base64.decode64(parts.last).split(':')
  {CLIENT_ID => username, CLIENT_SECRET => password}
end

.parse(resource_owner, request, params = nil) ⇒ Object 



21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
 
# File 'lib/oauth2/router.rb', line 21

def self.parse(resource_owner, request, params = nil)
  if error = transport_error(request)
    return error
  end
  
  params ||= request.params
  auth     = auth_params(request, params)
  
  if auth[CLIENT_ID] and auth[CLIENT_ID] != params[CLIENT_ID]
    return Provider::Error.new("#{CLIENT_ID} from Basic Auth and request body do not match")
  end
  
  params = params.merge(auth)
  
  if params[GRANT_TYPE]
    request.post? ?
        Provider::Exchange.new(resource_owner, params) :
        Provider::Error.new("should be a POST request")
  else
    Provider::Authorization.new(resource_owner, params)
  end
end

.transport_error(request) ⇒ Object 



13
14
15
16
17
18
19
 
# File 'lib/oauth2/router.rb', line 13

def self.transport_error(request)
  uri = URI.parse(request.url)
  
  if Provider.enforce_ssl and not uri.is_a?(URI::HTTPS)
    return Provider::Error.new("must make requests using HTTPS")
  end
end