Contents

module Doorkeeper
  module Orm
    module Sequel
      module RedirectUriValidator
        extend ActiveSupport::Concern

        included do
          def validates_redirect_uri(attribute)
            value = self[attribute]

            if value.blank?
              add_error(attribute, :blank)
            else
              value.split.each do |val|
                uri = ::URI.parse(val)
                return true if native_redirect_uri?(uri)
                validate_uri(uri, attribute)
              end
            end
          rescue URI::InvalidURIError
            add_error(attribute, :invalid_uri)
          end

          private

          def native_redirect_uri?(uri)
            native_redirect_uri.present? && uri.to_s == native_redirect_uri.to_s
          end

          def validate_uri(uri, attribute)
            {
              fragment_present: uri.fragment.present?,
              relative_uri: uri.scheme.nil? || uri.host.nil?,
              secured_uri: invalid_ssl_uri?(uri)
            }.each do |error, condition|
              add_error(attribute, error) if condition
            end
          end

          def invalid_ssl_uri?(uri)
            forces_ssl = Doorkeeper.configuration.force_ssl_in_redirect_uri
            forces_ssl && uri.try(:scheme) == 'http'
          end

          def native_redirect_uri
            Doorkeeper.configuration.native_redirect_uri
          end

          def add_error(attribute, error)
            scope = 'sequel.errors.models.doorkeeper/application.attributes.redirect_uri'
            errors.add(attribute, I18n.t(error, scope: scope))
          end
        end
      end
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
doorkeeper-sequel-1.4.0	lib/doorkeeper/orm/sequel/validators/redirect_uri_validator.rb
doorkeeper-sequel-1.3.1	lib/doorkeeper/orm/sequel/validators/redirect_uri_validator.rb
doorkeeper-sequel-1.3.0	lib/doorkeeper/orm/sequel/validators/redirect_uri_validator.rb
doorkeeper-sequel-1.2.3	lib/doorkeeper/orm/sequel/validators/redirect_uri_validator.rb
doorkeeper-sequel-1.2.2	lib/doorkeeper/orm/sequel/validators/redirect_uri_validator.rb