Contents

# encoding: ascii-8bit

# Copyright 2022 Ball Aerospace & Technologies Corp.
# All Rights Reserved.
#
# This program is free software; you can modify and/or redistribute it
# under the terms of the GNU Affero General Public License
# as published by the Free Software Foundation; version 3 with
# attribution addendums as found in the LICENSE.txt
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.

# Modified by OpenC3, Inc.
# All changes Copyright 2022, OpenC3, Inc.
# All Rights Reserved

require 'digest'
require 'openc3/utilities/store'

module OpenC3
  class AuthModel
    PRIMARY_KEY = 'OPENC3__TOKEN'
    SERVICE_KEY = 'OPENC3__SERVICE__TOKEN'

    def self.is_set?(key = PRIMARY_KEY)
      Store.exists(key) == 1
    end

    def self.verify(token, permission: nil)
      return false if token.nil? or token.empty?

      token_hash = hash(token)
      return true if Store.get(PRIMARY_KEY) == token_hash

      service_hash = Store.get(SERVICE_KEY)
      if ENV['OPENC3_SERVICE_PASSWORD'] and hash(ENV['OPENC3_SERVICE_PASSWORD']) != service_hash
        set_hash = hash(ENV['OPENC3_SERVICE_PASSWORD'])
        OpenC3::Store.set(SERVICE_KEY, set_hash)
        service_hash = set_hash
      end
      return true if service_hash == token_hash and permission != 'admin'

      return false
    end

    def self.set(token, old_token, key = PRIMARY_KEY)
      raise "token must not be nil or empty" if token.nil? or token.empty?

      if is_set?(key)
        raise "old_token must not be nil or empty" if old_token.nil? or old_token.empty?
        raise "old_token incorrect" unless verify(old_token)
      end
      Store.set(key, hash(token))
    end

    private

    def self.hash(token)
      Digest::SHA2.hexdigest token
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
openc3-5.0.10	lib/openc3/models/auth_model.rb
openc3-5.0.9	lib/openc3/models/auth_model.rb
openc3-5.0.8	lib/openc3/models/auth_model.rb
openc3-5.0.7	lib/openc3/models/auth_model.rb
openc3-5.0.6	lib/openc3/models/auth_model.rb