Contents

module Touth
  module ActsAsTokenAuthenticatable

    def access_token(lifetime = Touth.access_token_lifetime)
      expires_at = Time.now.to_i + lifetime

      "#{access_token_id(expires_at)}#{[expires_at].pack('V')}".unpack('H*')[0]
    end

    def valid_access_token?(token)
      begin
        data = [token].pack 'H*'
        token_id, timestamp = data[0..0x1f], data[0x20..-1]
        expires_at = timestamp.unpack('V')[0]

        access_token_id(expires_at) == token_id && Time.now.to_i < expires_at
      rescue
        false
      end
    end

  private

    def access_token_id(expires_at)
      raw = [
        expires_at,
        self.class.name,
        self.id,
        self.send(Touth.password_field),
      ].join ':'

      digest = OpenSSL::Digest.new 'sha256'
      OpenSSL::HMAC.digest digest, Touth.client_secret_key, raw
    end

  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
touth-0.0.2	lib/touth/acts_as_token_authenticatable.rb
touth-0.0.1	lib/touth/acts_as_token_authenticatable.rb