##// END OF EJS Templates
Add token value uniqueness validation (#3351)....
Jean-Philippe Lang -
r2642:f5eb1be26857
parent child
Show More
@@ -1,41 +1,42
1 # redMine - project management software
1 # redMine - project management software
2 # Copyright (C) 2006 Jean-Philippe Lang
2 # Copyright (C) 2006 Jean-Philippe Lang
3 #
3 #
4 # This program is free software; you can redistribute it and/or
4 # This program is free software; you can redistribute it and/or
5 # modify it under the terms of the GNU General Public License
5 # modify it under the terms of the GNU General Public License
6 # as published by the Free Software Foundation; either version 2
6 # as published by the Free Software Foundation; either version 2
7 # of the License, or (at your option) any later version.
7 # of the License, or (at your option) any later version.
8 #
8 #
9 # This program is distributed in the hope that it will be useful,
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU General Public License for more details.
12 # GNU General Public License for more details.
13 #
13 #
14 # You should have received a copy of the GNU General Public License
14 # You should have received a copy of the GNU General Public License
15 # along with this program; if not, write to the Free Software
15 # along with this program; if not, write to the Free Software
16 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
16 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
17
17
18 class Token < ActiveRecord::Base
18 class Token < ActiveRecord::Base
19 belongs_to :user
19 belongs_to :user
20 validates_uniqueness_of :value
20
21
21 @@validity_time = 1.day
22 @@validity_time = 1.day
22
23
23 def before_create
24 def before_create
24 self.value = Token.generate_token_value
25 self.value = Token.generate_token_value
25 end
26 end
26
27
27 # Return true if token has expired
28 # Return true if token has expired
28 def expired?
29 def expired?
29 return Time.now > self.created_on + @@validity_time
30 return Time.now > self.created_on + @@validity_time
30 end
31 end
31
32
32 # Delete all expired tokens
33 # Delete all expired tokens
33 def self.destroy_expired
34 def self.destroy_expired
34 Token.delete_all ["action <> 'feeds' AND created_on < ?", Time.now - @@validity_time]
35 Token.delete_all ["action <> 'feeds' AND created_on < ?", Time.now - @@validity_time]
35 end
36 end
36
37
37 private
38 private
38 def self.generate_token_value
39 def self.generate_token_value
39 ActiveSupport::SecureRandom.hex(20)
40 ActiveSupport::SecureRandom.hex(20)
40 end
41 end
41 end
42 end
General Comments 0
You need to be logged in to leave comments. Login now