Module: Wor::Authentication::SessionsController

Defined in:
lib/wor/authentication/sessions_controller.rb

Instance Method Summary collapse

Instance Method Details

#create ⇒ Object 



5
6
7
8
9
10
11
12
13
14
15
 
# File 'lib/wor/authentication/sessions_controller.rb', line 5

def create
  entity = authenticate_entity(authenticate_params)
  if entity
    token_data = generate_access_token(entity)
    render json: {
      access_token: token_data[:token], renew_id: token_data[:renew_id]
    }, status: :ok
  else
    render_error('Invalid authentication credentials', :unauthorized)
  end
end

#generate_access_token(entity) ⇒ Object 



32
33
34
35
36
37
38
39
40
41
 
# File 'lib/wor/authentication/sessions_controller.rb', line 32

def generate_access_token(entity)
  renew_id = token_renew_id
  payload = entity_payload(entity).merge(
    entity_custom_validation: entity_custom_validation_value(entity),
    expiration_date: new_token_expiration_date,
    maximum_useful_date: token_maximum_useful_date,
    renew_id: renew_id
  )
  { token: Wor::Authentication::TokenManager.new(token_key).encode(payload), renew_id: renew_id }
end

#invalidate_all ⇒ Object 



25
26
27
28
29
30
 
# File 'lib/wor/authentication/sessions_controller.rb', line 25

def invalidate_all
  # should we rescue anything here ?
  # if invalidating uses db and fails, or something like that
  entity_custom_validation_invalidate_all_value(current_entity)
  head :ok
end

#renew ⇒ Object 



17
18
19
20
21
22
23
 
# File 'lib/wor/authentication/sessions_controller.rb', line 17

def renew
  if !decoded_token.valid_renew_id?(renew_token_params[:renew_id])
    render_error('Invalid renew_id', :unauthorized)
  else
    render json: { access_token: renew_access_token(current_entity) }, status: :ok
  end
end

#renew_access_token(entity) ⇒ Object 



43
44
45
46
47
48
 
# File 'lib/wor/authentication/sessions_controller.rb', line 43

def renew_access_token(entity)
  payload = decoded_token.payload
  payload[:expiration_date] = new_token_expiration_date
  payload[:entity_custom_validation] = entity_custom_validation_renew_value(entity)
  Wor::Authentication::TokenManager.new(token_key).encode(payload)
end