To check out this repository please hg clone the following URL, or open the URL using EasyMercurial or your preferred Mercurial client.
root / app / models / .svn / text-base / token.rb.svn-base @ 442:753f1380d6bc
History | View | Annotate | Download (1.54 KB)
| 1 |
# Redmine - project management software |
|---|---|
| 2 |
# Copyright (C) 2006-2009 Jean-Philippe Lang |
| 3 |
# |
| 4 |
# This program is free software; you can redistribute it and/or |
| 5 |
# modify it under the terms of the GNU General Public License |
| 6 |
# as published by the Free Software Foundation; either version 2 |
| 7 |
# of the License, or (at your option) any later version. |
| 8 |
# |
| 9 |
# This program is distributed in the hope that it will be useful, |
| 10 |
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 11 |
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 12 |
# GNU General Public License for more details. |
| 13 |
# |
| 14 |
# You should have received a copy of the GNU General Public License |
| 15 |
# along with this program; if not, write to the Free Software |
| 16 |
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
| 17 |
|
| 18 |
class Token < ActiveRecord::Base |
| 19 |
belongs_to :user |
| 20 |
validates_uniqueness_of :value |
| 21 |
|
| 22 |
before_create :delete_previous_tokens |
| 23 |
|
| 24 |
@@validity_time = 1.day |
| 25 |
|
| 26 |
def before_create |
| 27 |
self.value = Token.generate_token_value |
| 28 |
end |
| 29 |
|
| 30 |
# Return true if token has expired |
| 31 |
def expired? |
| 32 |
return Time.now > self.created_on + @@validity_time |
| 33 |
end |
| 34 |
|
| 35 |
# Delete all expired tokens |
| 36 |
def self.destroy_expired |
| 37 |
Token.delete_all ["action <> 'feeds' AND created_on < ?", Time.now - @@validity_time] |
| 38 |
end |
| 39 |
|
| 40 |
private |
| 41 |
def self.generate_token_value |
| 42 |
ActiveSupport::SecureRandom.hex(20) |
| 43 |
end |
| 44 |
|
| 45 |
# Removes obsolete tokens (same user and action) |
| 46 |
def delete_previous_tokens |
| 47 |
if user |
| 48 |
Token.delete_all(['user_id = ? AND action = ?', user.id, action]) |
| 49 |
end |
| 50 |
end |
| 51 |
end |