Packages
boruta
0.1.0-rc.5
3.0.0-beta.4
3.0.0-beta.3
3.0.0-beta.2
3.0.0-beta.1
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
2.0.0-rc.1
2.0.0-rc.0
1.2.1
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
1.0.0-rc.3
1.0.0-rc.2
1.0.0-rc.1
1.0.0-rc.0
0.2.1
0.2.0
0.1.1
0.1.0
0.1.0-rc.5
0.1.0-rc.4
0.1.0-rc.3
0.1.0-rc.2
0.1.0-rc.1
Core of an OAuth/OpenID Connect provider enabling authorization in your applications.
Current section
Files
Jump to
Current section
Files
lib/boruta/oauth/authorization/access_token.ex
defmodule Boruta.Oauth.Authorization.AccessToken do
@moduledoc """
Access token authorization
"""
import Boruta.Config, only: [access_tokens: 0]
alias Boruta.Oauth.Error
alias Boruta.Oauth.Token
@doc """
Authorize the access token corresponding to the given params.
## Examples
iex> authorize(%{value: "value"})
{:ok, %Boruta.Oauth.Token{...}}
"""
@spec authorize(params ::
[value: String.t()] |
[refresh_token: String.t()]
) ::
{:error,
%Error{
:error => :invalid_access_token,
:error_description => String.t(),
:format => nil,
:redirect_uri => nil,
:status => :unauthorized
}}
| {:ok, %Token{}}
def authorize(value: value) do
with %Token{} = token <- access_tokens().get_by(value: value),
:ok <- Token.expired?(token) do
{:ok, token}
else
{:error, error} ->
{:error,
%Error{
status: :bad_request,
error: :invalid_access_token,
error_description: error
}
}
nil ->
{:error,
%Error{
status: :bad_request,
error: :invalid_access_token,
error_description: "Provided access token is invalid."
}
}
end
end
def authorize(refresh_token: refresh_token) do
with %Token{} = token <- access_tokens().get_by(refresh_token: refresh_token),
:ok <- Token.expired?(token) do
{:ok, token}
else
{:error, error} ->
{:error,
%Error{
status: :bad_request,
error: :invalid_refresh_token,
error_description: error
}
}
nil ->
{:error,
%Error{
status: :bad_request,
error: :invalid_refresh_token,
error_description: "Provided refresh token is incorrect."
}
}
end
end
end