Contents

module Gringotts
  class AttemptValidator
    
    CODE_FRESHNESS_LIMIT = 30.minutes
    LOCKOUT_PERIOD = 30.minutes
    MAX_UNSUCCESSFUL_ATTEMPTS = 3
   
    def self.valid?(attempt)
      return AttemptValidator.new(attempt, attempt.vault.recent_code).successful?
    end
    
    def initialize(attempt, code)
      @attempt = attempt
      @code    = code
    end
    
    attr_reader :attempt, :code
    
    def successful?
      
      if self.matches?
        if self.stale?
          self.mark_unsuccessful("Code expired")
        elsif self.used?
          self.mark_unsuccessful("Code already used")
        else
          self.mark_successful
        end
      else
        self.mark_unsuccessful("Invalid code")
      end
      
      return @attempt.successful?
    end
    
    def mark_unsuccessful(msg)
      @attempt.successful = 0
      @attempt.errors[:validator] << msg
    end
    
    def mark_successful
      @attempt.successful = 1
    end
        
    def stale?
      return @code.expires_at < (Time.now - CODE_FRESHNESS_LIMIT)
    end
    
    def used?
      return Gringotts::Attempt.where(vault_id: @attempt.vault_id, code_received: @attempt.code_received, successful: true).count > 0
    end
    
    def matches?
      return @attempt.code_received == @code.value
    end
    
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
gringotts-0.6.7	app/models/gringotts/attempt_validator.rb
gringotts-0.6.5	app/models/gringotts/attempt_validator.rb