Class: QuoVadis::Token

Inherits:

Object

• Object
• QuoVadis::Token

Extended by:

Hmacable

Defined in:

app/models/quo_vadis/token.rb

Direct Known Subclasses

AccountConfirmationToken, PasswordResetToken

Class Method Summary

• .find_account(token) ⇒ Object
• .generate(account) ⇒ Object

Methods included from Hmacable

compute_hmac, timing_safe_eql?

Class Method Details

.find_account(token) ⇒ Object

# File 'app/models/quo_vadis/token.rb', line 15

def find_account(token)
  provided_public_data, provided_hmac = token.split '--'
  id, expires_at = provided_public_data.split '-'
  account = Account.find id
  data = data_for_hmac provided_public_data, account
  actual_hmac = compute_hmac data
  return nil unless timing_safe_eql? provided_hmac, actual_hmac
  return nil if expires_at.to_i < Time.current.to_i
  account
rescue
  nil
end

.generate(account) ⇒ Object

# File 'app/models/quo_vadis/token.rb', line 9

def generate(account)
  public_data = "#{account.id}-#{expires_at}"
  data = data_for_hmac public_data, account
  "#{public_data}--#{compute_hmac(data)}"
end