Class: StandardId::ClientGrant

Inherits:
ApplicationRecord show all
Defined in:
app/models/standard_id/client_grant.rb

Overview

Records a user’s prior consent to an OAuth client, so repeat authorizations for the same (account, client) skip the consent screen. One row per (account, client); re-approval updates the stored scope.

Class Method Summary collapse

Class Method Details

.granted?(account:, client_id:, requested_scope: nil) ⇒ Boolean

Whether ‘account` has already consented to `client_id` covering every scope token in `requested_scope`. A grant with a nil/blank stored scope is treated as covering nothing new only when the request also asks for nothing (blank request) — otherwise the requested tokens must all be a subset of the previously granted set.

Returns:

  • (Boolean) 


18
19
20
21
22
23
24
25
26
27
28
29
 
# File 'app/models/standard_id/client_grant.rb', line 18

def self.granted?(account:, client_id:, requested_scope: nil)
  return false if .nil? || client_id.blank?

  grant = find_by(account_id: .id, client_id: client_id)
  return false unless grant

  requested = scope_tokens(requested_scope)
  return true if requested.empty?

  granted = scope_tokens(grant.scope)
  (requested - granted).empty?
end

.record!(account:, client_id:, scope: nil) ⇒ Object

Record (or update) a grant for the given account + client + scope.



32
33
34
35
36
37
 
# File 'app/models/standard_id/client_grant.rb', line 32

def self.record!(account:, client_id:, scope: nil)
  grant = find_or_initialize_by(account_id: .id, client_id: client_id)
  grant.scope = scope
  grant.save!
  grant
end