Class: StandardId::Oauth::AuthorizationCodeFlow

Inherits:
TokenGrantFlow show all
Defined in:
lib/standard_id/oauth/authorization_code_flow.rb

Instance Attribute Summary

Attributes inherited from TokenGrantFlow

#params, #request

Attributes inherited from BaseRequestFlow

#current_account, #params, #request

Instance Method Summary collapse

Methods inherited from TokenGrantFlow

#execute, extra_permitted_keys, #initialize

Methods inherited from BaseRequestFlow

expect_params, expected_params, extra_permitted_keys, #initialize, permit_params, permitted_params

Constructor Details

This class inherits a constructor from StandardId::Oauth::TokenGrantFlow

Instance Method Details

#authenticate! ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
# File 'lib/standard_id/oauth/authorization_code_flow.rb', line 7

def authenticate!
  @credential = validate_client_secret!(params[:client_id], params[:client_secret])

  @authorization_code = find_authorization_code(params[:code])
  unless @authorization_code&.valid_for_client?(params[:client_id])
    raise StandardId::InvalidGrantError, "Invalid or expired authorization code"
  end

  if params[:redirect_uri].present? && @authorization_code.redirect_uri != params[:redirect_uri]
    raise StandardId::InvalidGrantError, "Redirect URI mismatch"
  end

  unless @authorization_code.pkce_valid?(params[:code_verifier])
    raise StandardId::InvalidGrantError, "Invalid PKCE code_verifier"
  end

  @authorization_code.mark_as_used!
  emit_code_consumed
end