Chris@0: # Redmine - project management software
Chris@909: # Copyright (C) 2006-2011  Jean-Philippe Lang
Chris@0: #
Chris@0: # This program is free software; you can redistribute it and/or
Chris@0: # modify it under the terms of the GNU General Public License
Chris@0: # as published by the Free Software Foundation; either version 2
Chris@0: # of the License, or (at your option) any later version.
Chris@909: #
Chris@0: # This program is distributed in the hope that it will be useful,
Chris@0: # but WITHOUT ANY WARRANTY; without even the implied warranty of
Chris@0: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
Chris@0: # GNU General Public License for more details.
Chris@909: #
Chris@0: # You should have received a copy of the GNU General Public License
Chris@0: # along with this program; if not, write to the Free Software
Chris@0: # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
Chris@0: 
Chris@0: class Token < ActiveRecord::Base
Chris@0:   belongs_to :user
Chris@0:   validates_uniqueness_of :value
Chris@909: 
Chris@909:   before_create :delete_previous_tokens, :generate_new_token
Chris@909: 
Chris@0:   @@validity_time = 1.day
Chris@909: 
Chris@909:   def generate_new_token
Chris@0:     self.value = Token.generate_token_value
Chris@0:   end
Chris@0: 
Chris@909:   # Return true if token has expired
Chris@0:   def expired?
Chris@0:     return Time.now > self.created_on + @@validity_time
Chris@0:   end
Chris@909: 
Chris@0:   # Delete all expired tokens
Chris@0:   def self.destroy_expired
Chris@0:     Token.delete_all ["action <> 'feeds' AND created_on < ?", Time.now - @@validity_time]
Chris@0:   end
Chris@909: 
Chris@0: private
Chris@0:   def self.generate_token_value
Chris@0:     ActiveSupport::SecureRandom.hex(20)
Chris@0:   end
Chris@909: 
Chris@0:   # Removes obsolete tokens (same user and action)
Chris@0:   def delete_previous_tokens
Chris@0:     if user
Chris@0:       Token.delete_all(['user_id = ? AND action = ?', user.id, action])
Chris@0:     end
Chris@0:   end
Chris@0: end