44 lines
1 KiB
Ruby
44 lines
1 KiB
Ruby
class RequestToken < OauthToken
|
|
attr_accessor :provided_oauth_verifier
|
|
|
|
def authorize!(user)
|
|
return false if authorized?
|
|
self.user = user
|
|
self.authorized_at = Time.now
|
|
self.verifier = OAuth::Helper.generate_key(20)[0, 20] unless oauth10?
|
|
save
|
|
end
|
|
|
|
def exchange!
|
|
return false unless authorized?
|
|
return false unless oauth10? || verifier == provided_oauth_verifier
|
|
|
|
RequestToken.transaction do
|
|
params = { :user => user, :client_application => client_application }
|
|
# copy the permissions from the authorised request token to the access token
|
|
client_application.permissions.each do |p|
|
|
params[p] = self[p]
|
|
end
|
|
|
|
access_token = AccessToken.create(params)
|
|
invalidate!
|
|
access_token
|
|
end
|
|
end
|
|
|
|
def to_query
|
|
if oauth10?
|
|
super
|
|
else
|
|
"#{super}&oauth_callback_confirmed=true"
|
|
end
|
|
end
|
|
|
|
def oob?
|
|
callback_url.nil? || callback_url.casecmp("oob").zero?
|
|
end
|
|
|
|
def oauth10?
|
|
(defined? OAUTH_10_SUPPORT) && OAUTH_10_SUPPORT && callback_url.blank?
|
|
end
|
|
end
|