Sha256: ca25572cc7f4c049689de0b49168227c84e162b65b8c9be07b2eef7d83c95b69
Contents?: true
Size: 1.46 KB
Versions: 20
Compression:
Stored size: 1.46 KB
Contents
class Oauth2::AuthorizationsController < ApplicationController
before_filter :authenticate_user!
rescue_from Rack::OAuth2::Server::Authorize::BadRequest do |e|
@error = e
render :error, :status => e.status
end
def new
respond *authorize_endpoint.call(request.env)
end
def create
respond *authorize_endpoint(:allow_approval).call(request.env)
end
private
def respond(status, header, response)
["WWW-Authenticate"].each do |key|
headers[key] = header[key] if header[key].present?
end
if response.redirect?
redirect_to header['Location']
else
render :new
end
end
def authorize_endpoint(allow_approval = false)
Rack::OAuth2::Server::Authorize.new do |req, res|
@client = Client.find_by_identifier(req.client_id) || req.bad_request!
res.redirect_uri = @redirect_uri = req.verify_redirect_uri!(@client.redirect_uri)
if allow_approval
if params[:approve].present?
case req.response_type
when :code
authorization_code = current_user.authorization_codes.create(:client_id => @client, :redirect_uri => @redirect_uri)
res.code = authorization_code.token
when :token
res.access_token = current_user.access_tokens.create(:client_id => @client).to_bearer_token
end
res.approve!
else
req.access_denied!
end
else
@response_type = req.response_type
end
end
end
end
Version data entries
20 entries across 20 versions & 2 rubygems