| @@ -1,66 +1,66 | |||
|
|
1 | 1 | # Redmine - project management software |
|
|
2 | 2 | # Copyright (C) 2006-2013 Jean-Philippe Lang |
|
|
3 | 3 | # |
|
|
4 | 4 | # This program is free software; you can redistribute it and/or |
|
|
5 | 5 | # modify it under the terms of the GNU General Public License |
|
|
6 | 6 | # as published by the Free Software Foundation; either version 2 |
|
|
7 | 7 | # of the License, or (at your option) any later version. |
|
|
8 | 8 | # |
|
|
9 | 9 | # This program is distributed in the hope that it will be useful, |
|
|
10 | 10 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
11 | 11 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
12 | 12 | # GNU General Public License for more details. |
|
|
13 | 13 | # |
|
|
14 | 14 | # You should have received a copy of the GNU General Public License |
|
|
15 | 15 | # along with this program; if not, write to the Free Software |
|
|
16 | 16 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
|
|
17 | 17 | |
|
|
18 | 18 | class Token < ActiveRecord::Base |
|
|
19 | 19 | belongs_to :user |
|
|
20 | 20 | validates_uniqueness_of :value |
|
|
21 | 21 | |
|
|
22 | 22 | before_create :delete_previous_tokens, :generate_new_token |
|
|
23 | 23 | |
|
|
24 | 24 | @@validity_time = 1.day |
|
|
25 | 25 | |
|
|
26 | 26 | def generate_new_token |
|
|
27 | 27 | self.value = Token.generate_token_value |
|
|
28 | 28 | end |
|
|
29 | 29 | |
|
|
30 | 30 | # Return true if token has expired |
|
|
31 | 31 | def expired? |
|
|
32 | 32 | return Time.now > self.created_on + @@validity_time |
|
|
33 | 33 | end |
|
|
34 | 34 | |
|
|
35 | 35 | # Delete all expired tokens |
|
|
36 | 36 | def self.destroy_expired |
|
|
37 | 37 | Token.delete_all ["action NOT IN (?) AND created_on < ?", ['feeds', 'api'], Time.now - @@validity_time] |
|
|
38 | 38 | end |
|
|
39 | 39 | |
|
|
40 | 40 | # Returns the active user who owns the key for the given action |
|
|
41 | 41 | def self.find_active_user(action, key, validity_days=nil) |
|
|
42 | 42 | action = action.to_s |
|
|
43 | 43 | key = key.to_s |
|
|
44 | 44 | return nil unless action.present? && key =~ /\A[a-f0-9]+\z/ |
|
|
45 | 45 | |
|
|
46 | 46 | token = find_by_action_and_value(action, key) |
|
|
47 | 47 | if token && token.user && token.user.active? |
|
|
48 | if validity_days.nil? || (token.created_on > validity_days.ago) | |
|
|
48 | if validity_days.nil? || (token.created_on > validity_days.days.ago) | |
|
|
49 | 49 | token.user |
|
|
50 | 50 | end |
|
|
51 | 51 | end |
|
|
52 | 52 | end |
|
|
53 | 53 | |
|
|
54 | 54 | def self.generate_token_value |
|
|
55 | 55 | Redmine::Utils.random_hex(20) |
|
|
56 | 56 | end |
|
|
57 | 57 | |
|
|
58 | 58 | private |
|
|
59 | 59 | |
|
|
60 | 60 | # Removes obsolete tokens (same user and action) |
|
|
61 | 61 | def delete_previous_tokens |
|
|
62 | 62 | if user |
|
|
63 | 63 | Token.delete_all(['user_id = ? AND action = ?', user.id, action]) |
|
|
64 | 64 | end |
|
|
65 | 65 | end |
|
|
66 | 66 | end |
General Comments 0
You need to be logged in to leave comments.
Login now