Contents

# frozen_string_literal: true

module Doorkeeper
  module OAuth
    class PasswordAccessTokenRequest < BaseRequest
      include OAuth::Helpers

      validate :client,         error: :invalid_client
      validate :resource_owner, error: :invalid_grant
      validate :scopes,         error: :invalid_scope

      attr_accessor :server, :client, :resource_owner, :parameters,
                    :access_token

      def initialize(server, client, resource_owner, parameters = {})
        @server          = server
        @resource_owner  = resource_owner
        @client          = client
        @parameters      = parameters
        @original_scopes = parameters[:scope]
        @grant_type      = Doorkeeper::OAuth::PASSWORD
      end

      private

      def before_successful_response
        find_or_create_access_token(client, resource_owner.id, scopes, server)
        super
      end

      def validate_scopes
        client_scopes = client.try(:scopes)
        return true if scopes.blank?

        ScopeChecker.valid?(scopes.to_s, server.scopes, client_scopes)
      end

      def validate_resource_owner
        !resource_owner.nil?
      end

      def validate_client
        !parameters[:client_id] || !client.nil?
      end
    end
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
doorkeeper-5.0.3	lib/doorkeeper/oauth/password_access_token_request.rb
doorkeeper-5.0.2	lib/doorkeeper/oauth/password_access_token_request.rb
doorkeeper-5.0.1	lib/doorkeeper/oauth/password_access_token_request.rb