class OauthController < ApplicationController
layout 'site'
- before_filter :authorize_web, :except => [:request_token, :access_token]
+ before_filter :authorize_web, :only => [:oauthorize, :revoke]
+ before_filter :set_locale, :only => [:oauthorize, :revoke]
before_filter :require_user, :only => [:oauthorize]
before_filter :verify_oauth_consumer_signature, :only => [:request_token]
before_filter :verify_oauth_request_token, :only => [:access_token]
else
render :nothing => true, :status => 401
end
- end
-
+ end
+
def access_token
@token = current_token && current_token.exchange!
if @token
def oauthorize
@token = RequestToken.find_by_token params[:oauth_token]
- unless @token.invalidated?
- if request.post?
+ unless @token.invalidated?
+ if request.post?
any_auth = false
@token.client_application.permissions.each do |pref|
if params[pref]
@token.write_attribute(pref, false)
end
end
-
+
if any_auth
@token.authorize!(@user)
redirect_url = params[:oauth_callback] || @token.client_application.callback_url
render :action => "authorize_failure"
end
end
-
+
def revoke
@token = @user.oauth_tokens.find_by_token params[:token]
if @token
logger.info "about to redirect"
redirect_to :controller => 'oauth_clients', :action => 'index'
end
-
end