Class: KStor::Controller::Authentication

Inherits:
Object
  • Object
show all
Defined in:
lib/kstor/controller/authentication.rb

Overview

Handle user authentication and sessions.

Instance Method Summary collapse

Constructor Details

#initialize(store, session_store) ⇒ Authentication

Returns a new instance of Authentication.



13
14
15
16
 
# File 'lib/kstor/controller/authentication.rb', line 13

def initialize(store, session_store)
  @store = store
  @sessions = session_store
end

Instance Method Details

#allowed?(user) ⇒ Boolean

return true if login is allowed to access the database.

Returns:

  • (Boolean) 


27
28
29
 
# File 'lib/kstor/controller/authentication.rb', line 27

def allowed?(user)
  user.status == 'new' || user.status == 'active'
end

#authenticate(req) ⇒ Object 



18
19
20
21
22
23
24
 
# File 'lib/kstor/controller/authentication.rb', line 18

def authenticate(req)
  if @store.users?
    unlock_user(req)
  else
    create_first_user(req)
  end
end

#create_first_user(req) ⇒ Object 



66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
 
# File 'lib/kstor/controller/authentication.rb', line 66

def create_first_user(req)
  raise Error.for_code('AUTH/MISSING') unless req.respond_to?(:login)

  Log.info("no user in database, creating #{req..inspect}")
  user = Model::User.new(
    login: req., name: req., status: 'new', keychain: {}
  )
  secret_key = user.secret_key(req.password)
  user.unlock(secret_key)
  @store.user_create(user)
  Log.info("user #{user.} created")

  session = Session.create(user, secret_key)
  @sessions << session

  [user, session.id]
end

#load_session(sid) ⇒ Object 



47
48
49
50
51
52
53
 
# File 'lib/kstor/controller/authentication.rb', line 47

def load_session(sid)
  Log.debug("loading session #{sid}")
  session = @sessions[sid]
  raise Error.for_code('AUTH/BADSESSION', sid) unless session

  [session.user, session.secret_key]
end

#load_user(login) ⇒ Object 



55
56
57
58
59
60
61
62
63
64
 
# File 'lib/kstor/controller/authentication.rb', line 55

def load_user()
  Log.debug("authenticating user #{.inspect}")
  user = @store.()
  Log.debug("loaded user ##{user.id} #{user.}")
  unless user && allowed?(user)
    raise Error.for_code('AUTH/FORBIDDEN', )
  end

  user
end

#unlock_user(req) ⇒ Object 



31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'lib/kstor/controller/authentication.rb', line 31

def unlock_user(req)
  if req.respond_to?(:session_id)
    session_id = req.session_id
    user, secret_key = load_session(session_id)
  else
    user = load_user(req.)
    secret_key = user.secret_key(req.password)
    session = Session.create(user, secret_key)
    @sessions << session
    session_id = session.id
  end
  user.unlock(secret_key)

  [user, session_id]
end