Chris@909: # Redmine - project management software
Chris@909: # Copyright (C) 2006-2011  Jean-Philippe Lang
Chris@909: #
Chris@909: # This program is free software; you can redistribute it and/or
Chris@909: # modify it under the terms of the GNU General Public License
Chris@909: # as published by the Free Software Foundation; either version 2
Chris@909: # of the License, or (at your option) any later version.
Chris@909: #
Chris@909: # This program is distributed in the hope that it will be useful,
Chris@909: # but WITHOUT ANY WARRANTY; without even the implied warranty of
Chris@909: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
Chris@909: # GNU General Public License for more details.
Chris@909: #
Chris@909: # You should have received a copy of the GNU General Public License
Chris@909: # along with this program; if not, write to the Free Software
Chris@909: # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
Chris@909: 
Chris@909: class Token < ActiveRecord::Base
Chris@909:   belongs_to :user
Chris@909:   validates_uniqueness_of :value
Chris@909: 
Chris@909:   before_create :delete_previous_tokens, :generate_new_token
Chris@909: 
Chris@909:   @@validity_time = 1.day
Chris@909: 
Chris@909:   def generate_new_token
Chris@909:     self.value = Token.generate_token_value
Chris@909:   end
Chris@909: 
Chris@909:   # Return true if token has expired
Chris@909:   def expired?
Chris@909:     return Time.now > self.created_on + @@validity_time
Chris@909:   end
Chris@909: 
Chris@909:   # Delete all expired tokens
Chris@909:   def self.destroy_expired
Chris@909:     Token.delete_all ["action <> 'feeds' AND created_on < ?", Time.now - @@validity_time]
Chris@909:   end
Chris@909: 
Chris@909: private
Chris@909:   def self.generate_token_value
Chris@909:     ActiveSupport::SecureRandom.hex(20)
Chris@909:   end
Chris@909: 
Chris@909:   # Removes obsolete tokens (same user and action)
Chris@909:   def delete_previous_tokens
Chris@909:     if user
Chris@909:       Token.delete_all(['user_id = ? AND action = ?', user.id, action])
Chris@909:     end
Chris@909:   end
Chris@909: end