1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
# frozen_string_literal: true
module Doorkeeper
module OAuth
module Authorization
class Code
attr_reader :pre_auth, :resource_owner, :token
def initialize(pre_auth, resource_owner)
@pre_auth = pre_auth
@resource_owner = resource_owner
end
def issue_token!
return @token if defined?(@token)
@token = Doorkeeper.config.access_grant_model.create!(access_grant_attributes)
end
def oob_redirect
{ action: :show, code: token.plaintext_token }
end
def access_grant?
true
end
private
def authorization_code_expires_in
Doorkeeper.config.authorization_code_expires_in
end
def access_grant_attributes
attributes = {
application_id: pre_auth.client.id,
expires_in: authorization_code_expires_in,
redirect_uri: pre_auth.redirect_uri,
scopes: pre_auth.scopes.to_s,
}
if Doorkeeper.config.polymorphic_resource_owner?
attributes[:resource_owner] = resource_owner
else
attributes[:resource_owner_id] = resource_owner.id
end
pkce_attributes.merge(attributes).merge(custom_attributes)
end
def custom_attributes
# Custom access token attributes are saved into the access grant,
# and then included in subsequently generated access tokens.
@pre_auth.custom_access_token_attributes.to_h.with_indifferent_access
end
def pkce_attributes
return {} unless pkce_supported?
{
code_challenge: pre_auth.code_challenge,
code_challenge_method: pre_auth.code_challenge_method,
}
end
# Ensures firstly, if migration with additional PKCE columns was
# generated and migrated
def pkce_supported?
Doorkeeper.config.access_grant_model.pkce_supported?
end
end
end
end
end
|
