Module: GDS::SSO::BearerToken

Defined in:
lib/gds-sso/bearer_token.rb

Class Method Summary collapse

Class Method Details

.locate(token_string) ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
 
# File 'lib/gds-sso/bearer_token.rb', line 7

def self.locate(token_string)
  user_details = GDS::SSO::Config.cache.fetch(['api-user-cache', token_string], expires_in: 5.minutes) do
    access_token = OAuth2::AccessToken.new(oauth_client, token_string)
    response_body = access_token.get("/user.json?client_id=#{CGI.escape(GDS::SSO::Config.oauth_id)}").body
    omniauth_style_response(response_body)
  end

  GDS::SSO::Config.user_klass.find_for_gds_oauth(user_details)
rescue OAuth2::Error
  nil
end

.oauth_client ⇒ Object 



19
20
21
22
23
24
25
 
# File 'lib/gds-sso/bearer_token.rb', line 19

def self.oauth_client
  @oauth_client ||= OAuth2::Client.new(
    GDS::SSO::Config.oauth_id,
    GDS::SSO::Config.oauth_secret,
    :site => GDS::SSO::Config.oauth_root_url
  )
end

.omniauth_style_response(response_body) ⇒ Object

Our User code assumes we’re getting our user data back via omniauth and so receiving it in omniauth’s preferred structure. Here we’re addressing signon directly so we need to transform the response ourselves.



31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'lib/gds-sso/bearer_token.rb', line 31

def self.omniauth_style_response(response_body)
  input = MultiJson.decode(response_body)['user']

  {
    'uid' => input['uid'],
    'info' => {
      'email' => input['email'],
      'name' => input['name']
    },
    'extra' => {
      'user' => {
        'permissions' => input['permissions'],
        'organisation_slug' => input['organisation_slug'],
        'organisation_content_id' => input['organisation_content_id'],
      }
    }
  }
end