Class: ExvoAuth::OAuth2::Strategy::NonInteractive

Inherits:
OAuth2::Strategy::Base
  • Object
show all
Defined in:
lib/exvo_auth/oauth2.rb

Overview

In short: if user is already signed in and the request scope matches current authentication with an OAuth2 provider, grant them access token, otherwise - deny authentication.

This is a simple, non-standard OAuth2 extension. Instead of redirecting following temporary token requests to an interactive user interface it returns a negative answer when user is not signed in or when app requests an extended scope that doesn’t match current authentication grant.

This strategy is needed to sign users in during json/jsonp requests, which cannot result in any interactive/navigational flows.

Instance Method Summary collapse

Instance Method Details

#authorize_params(options = {}) ⇒ Object 



13
14
15
 
# File 'lib/exvo_auth/oauth2.rb', line 13

def authorize_params(options = {})
  options.merge('type' => 'non_interactive').merge(client_params)
end

#authorize_url(params = {}) ⇒ Object 



17
18
19
 
# File 'lib/exvo_auth/oauth2.rb', line 17

def authorize_url(params={})
  @client.authorize_url(authorize_params.merge(params))
end

#get_token(code, params = {}, opts = {}) ⇒ Object 



21
22
23
 
# File 'lib/exvo_auth/oauth2.rb', line 21

def get_token(code, params={}, opts={})
  @client.get_token(client_params.merge(params), opts)
end