class Doorkeeper::OAuth::RefreshTokenRequest
def access_token_attributes
def access_token_attributes { application_id: refresh_token.application_id, resource_owner_id: refresh_token.resource_owner_id, scopes: scopes.to_s, expires_in: access_token_expires_in, use_refresh_token: true, }.tap do |attributes| if refresh_token_revoked_on_use? attributes[:previous_refresh_token] = refresh_token.refresh_token end end end
def access_token_expires_in
def access_token_expires_in context = Authorization::Token.build_context( client, Doorkeeper::OAuth::REFRESH_TOKEN, scopes ) Authorization::Token.access_token_expires_in(server, context) end
def before_successful_response
def before_successful_response refresh_token.transaction do refresh_token.lock! raise Errors::InvalidGrantReuse if refresh_token.revoked? refresh_token.revoke unless refresh_token_revoked_on_use? create_access_token end super end
def create_access_token
def create_access_token @access_token = AccessToken.create!(access_token_attributes) end
def default_scopes
def default_scopes refresh_token.scopes end
def initialize(server, refresh_token, credentials, parameters = {})
def initialize(server, refresh_token, credentials, parameters = {}) @server = server @refresh_token = refresh_token @credentials = credentials @original_scopes = parameters[:scope] || parameters[:scopes] @refresh_token_parameter = parameters[:refresh_token] @client = load_client(credentials) if credentials end
def load_client(credentials)
def load_client(credentials) Application.by_uid_and_secret(credentials.uid, credentials.secret) end
def refresh_token_revoked_on_use?
def refresh_token_revoked_on_use? Doorkeeper::AccessToken.refresh_token_revoked_on_use? end
def validate_client
def validate_client return true if credentials.blank? client.present? end
def validate_client_match
- See: https://tools.ietf.org/html/draft-ietf-oauth-v2-22#section-1.5 -
def validate_client_match return true if refresh_token.application_id.blank? client && refresh_token.application_id == client.id end
def validate_scope
def validate_scope if @original_scopes.present? ScopeChecker.valid?( scope_str: @original_scopes, server_scopes: refresh_token.scopes ) else true end end
def validate_token
def validate_token refresh_token.present? && !refresh_token.revoked? end
def validate_token_presence
def validate_token_presence @missing_param = :refresh_token if refresh_token.blank? && @refresh_token_parameter.blank? @missing_param.nil? end