summaryrefslogtreecommitdiffstats
path: root/model/authorize.go
blob: 6eaac97f1e4dee4aeeebfc2c0bd08e6fde21cb51 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
// Copyright (c) 2015 Spinpunch, Inc. All Rights Reserved.
// See License.txt for license information.

package model

import (
	"encoding/json"
	"io"
)

const (
	AUTHCODE_EXPIRE_TIME   = 60 * 10 // 10 minutes
	AUTHCODE_RESPONSE_TYPE = "code"
)

type AuthData struct {
	ClientId    string `json:"client_id"`
	UserId      string `json:"user_id"`
	Code        string `json:"code"`
	ExpiresIn   int32  `json:"expires_in"`
	CreateAt    int64  `json:"create_at"`
	RedirectUri string `json:"redirect_uri"`
	State       string `json:"state"`
	Scope       string `json:"scope"`
}

// IsValid validates the AuthData and returns an error if it isn't configured
// correctly.
func (ad *AuthData) IsValid() *AppError {

	if len(ad.ClientId) != 26 {
		return NewAppError("AuthData.IsValid", "Invalid client id", "")
	}

	if len(ad.UserId) != 26 {
		return NewAppError("AuthData.IsValid", "Invalid user id", "")
	}

	if len(ad.Code) == 0 || len(ad.Code) > 128 {
		return NewAppError("AuthData.IsValid", "Invalid authorization code", "client_id="+ad.ClientId)
	}

	if ad.ExpiresIn == 0 {
		return NewAppError("AuthData.IsValid", "Expires in must be set", "")
	}

	if ad.CreateAt <= 0 {
		return NewAppError("AuthData.IsValid", "Create at must be a valid time", "client_id="+ad.ClientId)
	}

	if len(ad.RedirectUri) > 256 {
		return NewAppError("AuthData.IsValid", "Invalid redirect uri", "client_id="+ad.ClientId)
	}

	if len(ad.State) > 128 {
		return NewAppError("AuthData.IsValid", "Invalid state", "client_id="+ad.ClientId)
	}

	if len(ad.Scope) > 128 {
		return NewAppError("AuthData.IsValid", "Invalid scope", "client_id="+ad.ClientId)
	}

	return nil
}

func (ad *AuthData) PreSave() {
	if ad.ExpiresIn == 0 {
		ad.ExpiresIn = AUTHCODE_EXPIRE_TIME
	}

	if ad.CreateAt == 0 {
		ad.CreateAt = GetMillis()
	}
}

func (ad *AuthData) ToJson() string {
	b, err := json.Marshal(ad)
	if err != nil {
		return ""
	} else {
		return string(b)
	}
}

func AuthDataFromJson(data io.Reader) *AuthData {
	decoder := json.NewDecoder(data)
	var ad AuthData
	err := decoder.Decode(&ad)
	if err == nil {
		return &ad
	} else {
		return nil
	}
}

func (ad *AuthData) IsExpired() bool {

	if GetMillis() > ad.CreateAt+int64(ad.ExpiresIn*1000) {
		return true
	}

	return false
}