Sha256: fc960ee192ed49696ad8e9547bf32a36c210d19ce0d6e22a27e6bb8ff504911a
Contents?: true
Size: 1.32 KB
Versions: 10
Compression:
Stored size: 1.32 KB
Contents
# -*- encoding : utf-8 -*-
class Card
# Singleton methods for account authentication and contextualization.
#
# Manages current user,
# "as" user, and password verification.
module Auth
extend Permissions
extend Proxy
extend Setup
extend Current
@as_card = @as_id = @current_id = @current = nil
class << self
# authenticate a user by their login name and unencrypted password.
# @param email [String]
# @param password [String]
# @return [+*account card, nil]
def authenticate email, password
account = Auth.find_account_by_email email
case
when !account then nil
when !account.active? then nil
when Card.config.no_authentication then account
when password_valid?(account, password.strip) then account
end
end
# check whether password is correct for account card
# @param account [+*account card]
# @param password [String]
def password_valid? account, password
account.password == encrypt(password, account.salt)
end
# encrypt password string with the given salt.
# @return [SHA1 String]
def encrypt password, salt
Digest::SHA1.hexdigest "#{salt}--#{password}--"
end
end
end
end
Version data entries
10 entries across 10 versions & 1 rubygems