To check out this repository please hg clone the following URL, or open the URL using EasyMercurial or your preferred Mercurial client.
root / app / models / token.rb @ 1361:7c0909052511
History | View | Annotate | Download (1.56 KB)
| 1 |
# Redmine - project management software
|
|---|---|
| 2 |
# Copyright (C) 2006-2012 Jean-Philippe Lang
|
| 3 |
#
|
| 4 |
# This program is free software; you can redistribute it and/or
|
| 5 |
# modify it under the terms of the GNU General Public License
|
| 6 |
# as published by the Free Software Foundation; either version 2
|
| 7 |
# of the License, or (at your option) any later version.
|
| 8 |
#
|
| 9 |
# This program is distributed in the hope that it will be useful,
|
| 10 |
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
| 11 |
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
| 12 |
# GNU General Public License for more details.
|
| 13 |
#
|
| 14 |
# You should have received a copy of the GNU General Public License
|
| 15 |
# along with this program; if not, write to the Free Software
|
| 16 |
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
| 17 |
|
| 18 |
class Token < ActiveRecord::Base |
| 19 |
belongs_to :user
|
| 20 |
validates_uniqueness_of :value
|
| 21 |
|
| 22 |
before_create :delete_previous_tokens, :generate_new_token |
| 23 |
|
| 24 |
@@validity_time = 1.day |
| 25 |
|
| 26 |
def generate_new_token |
| 27 |
self.value = Token.generate_token_value |
| 28 |
end
|
| 29 |
|
| 30 |
# Return true if token has expired
|
| 31 |
def expired? |
| 32 |
return Time.now > self.created_on + @@validity_time |
| 33 |
end
|
| 34 |
|
| 35 |
# Delete all expired tokens
|
| 36 |
def self.destroy_expired |
| 37 |
Token.delete_all ["action NOT IN (?) AND created_on < ?", ['feeds', 'api'], Time.now - @@validity_time] |
| 38 |
end
|
| 39 |
|
| 40 |
private |
| 41 |
def self.generate_token_value |
| 42 |
Redmine::Utils.random_hex(20) |
| 43 |
end
|
| 44 |
|
| 45 |
# Removes obsolete tokens (same user and action)
|
| 46 |
def delete_previous_tokens |
| 47 |
if user
|
| 48 |
Token.delete_all(['user_id = ? AND action = ?', user.id, action]) |
| 49 |
end
|
| 50 |
end
|
| 51 |
end
|