Contents

module Touth
  module ActionControllerSupport
    module ClassMethods

      def token_authentication_for(resource_name)
        unless @_init_token_authenticator_hook
          prepend_before_action :set_token_authorized_resource!
          @_init_token_authenticator_hook = true
        end

        resource_name = Touth.get_resource_name resource_name
        callback_name = "authenticate_#{resource_name}!".to_sym

        unless method_defined? callback_name
          define_method "#{resource_name}_signed_in?" do
            !!Touth::Authenticator.current(resource_name)
          end

          define_method "current_#{resource_name}" do
            Touth::Authenticator.current resource_name
          end

          define_method callback_name do
            authenticate_token_for! resource_name
          end

          protected callback_name
          before_action callback_name
        end
      end

    end

    module InstanceMethods

      protected

      def set_token_authorized_resource!
        token = request.headers[Touth.header_name]

        Authenticator.set_current Authenticator.get_resource(token)
      end

      def authenticate_token_for!(resource_name)
        unless Touth::Authenticator.current resource_name
          if Touth.allow_raise
            raise InvalidAccessTokenError, 'access token is not valid'
          else
            return unauthorized_token_error
          end
        end
      end

      def unauthorized_token_error
        render nothing: true, status: :unauthorized
        false
      end

    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
touth-1.3.0	lib/touth/action_controller_support.rb