Packages
boruta
0.1.0-rc.3
3.0.0-beta.4
3.0.0-beta.3
3.0.0-beta.2
3.0.0-beta.1
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
2.0.0-rc.1
2.0.0-rc.0
1.2.1
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
1.0.0-rc.3
1.0.0-rc.2
1.0.0-rc.1
1.0.0-rc.0
0.2.1
0.2.0
0.1.1
0.1.0
0.1.0-rc.5
0.1.0-rc.4
0.1.0-rc.3
0.1.0-rc.2
0.1.0-rc.1
Core of an OAuth/OpenID Connect provider enabling authorization in your applications.
Current section
Files
Jump to
Current section
Files
lib/boruta/oauth/authorization.ex
defprotocol Boruta.Oauth.Authorization do
@moduledoc """
"""
@doc """
Creates and returns a token for given request, depending of implementation.
"""
# TODO type check implementations
def token(request)
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.ClientCredentialsRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.ClientCredentialsRequest
alias Boruta.Oauth.Token
def token(%ClientCredentialsRequest{
client_id: client_id,
client_secret: client_secret,
scope: scope
}) do
with {:ok, client} <- client(id: client_id, secret: client_secret),
{:ok, scope} <- scope(scope: scope, client: client) do
token = Token.machine_changeset(%Token{client: client}, %{
client_id: client.id,
scope: scope
})
repo().insert(token)
end
end
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.PasswordRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.PasswordRequest
alias Boruta.Oauth.Token
def token(%PasswordRequest{
client_id: client_id,
client_secret: client_secret,
username: username,
password: password,
scope: scope
}) do
with {:ok, client} <- client(id: client_id, secret: client_secret),
{:ok, scope} <- scope(scope: scope, client: client),
{:ok, resource_owner} <- resource_owner(email: username, password: password) do
token = Token.resource_owner_with_refresh_token_changeset(
%Token{client: client, resource_owner: resource_owner},
%{client_id: client.id, resource_owner_id: resource_owner.id, scope: scope}
)
repo().insert(token)
end
end
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.AuthorizationCodeRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.AuthorizationCodeRequest
alias Boruta.Oauth.Token
def token(%AuthorizationCodeRequest{
client_id: client_id,
code: code,
redirect_uri: redirect_uri,
}) do
with {:ok, client} <- client(id: client_id, redirect_uri: redirect_uri),
{:ok, code} <- code(value: code, redirect_uri: redirect_uri),
{:ok, resource_owner} <- resource_owner(id: code.resource_owner_id) do
token = Token.resource_owner_with_refresh_token_changeset(
%Token{client: client, resource_owner: resource_owner},
%{client_id: client.id, resource_owner_id: resource_owner.id, scope: code.scope}
)
repo().insert(token)
end
end
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.TokenRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.TokenRequest
alias Boruta.Oauth.Token
def token(%TokenRequest{
client_id: client_id,
redirect_uri: redirect_uri,
resource_owner: resource_owner,
state: state,
scope: scope
}) do
with {:ok, client} <- client(id: client_id, redirect_uri: redirect_uri),
{:ok, scope} <- scope(scope: scope, client: client),
{:ok, resource_owner} <- resource_owner(resource_owner) do
token = Token.resource_owner_changeset(%Token{resource_owner: resource_owner, client: client}, %{
client_id: client.id,
resource_owner_id: resource_owner.id,
state: state,
scope: scope
})
repo().insert(token)
end
end
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.CodeRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.CodeRequest
alias Boruta.Oauth.Token
def token(%CodeRequest{
client_id: client_id,
redirect_uri: redirect_uri,
resource_owner: resource_owner,
state: state,
scope: scope
}) do
with {:ok, client} <- client(id: client_id, redirect_uri: redirect_uri),
{:ok, scope} <- scope(scope: scope, client: client),
{:ok, resource_owner} <- resource_owner(resource_owner) do
token = Token.code_changeset(%Token{resource_owner: resource_owner, client: client}, %{
client_id: client.id,
resource_owner_id: resource_owner.id,
redirect_uri: redirect_uri,
state: state,
scope: scope
})
repo().insert(token)
end
end
end
defimpl Boruta.Oauth.Authorization, for: Boruta.Oauth.RefreshTokenRequest do
import Boruta.Oauth.Authorization.Base
import Boruta.Config, only: [repo: 0]
alias Boruta.Oauth.RefreshTokenRequest
alias Boruta.Oauth.Token
def token(%RefreshTokenRequest{
client_id: client_id,
client_secret: client_secret,
refresh_token: refresh_token,
scope: scope
}) do
with {:ok, _} <- client(id: client_id, secret: client_secret),
{:ok, %Token{
client_id: client_id,
resource_owner_id: resource_owner_id,
client: client,
resource_owner: resource_owner
} = token} <- access_token(refresh_token: refresh_token),
{:ok, scope} <- scope(scope: scope, token: token) do
token = Token.refresh_token_changeset(%Token{resource_owner: resource_owner, client: client}, %{
client_id: client_id,
resource_owner_id: resource_owner_id,
scope: scope
})
repo().insert(token)
end
end
end