+ has_many :client_applications
+ has_many :oauth_tokens, :class_name => "OauthToken", :order => "authorized_at desc", :include => [:client_application]
+
+ validates_presence_of :email, :display_name
+ validates_confirmation_of :email#, :message => ' addresses must match'
+ validates_confirmation_of :pass_crypt#, :message => ' must match the confirmation password'
+ validates_uniqueness_of :display_name, :allow_nil => true
+ validates_uniqueness_of :email
+ validates_length_of :pass_crypt, :within => 8..255
+ validates_length_of :display_name, :within => 3..255, :allow_nil => true
+ validates_length_of :email, :within => 6..255
+ validates_format_of :email, :with => /^([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})$/i
+ validates_format_of :display_name, :with => /^[^\/;.,?]*$/
+ validates_numericality_of :home_lat, :allow_nil => true
+ validates_numericality_of :home_lon, :allow_nil => true
+ validates_numericality_of :home_zoom, :only_integer => true, :allow_nil => true
+
+ before_save :encrypt_password
+
+ file_column :image, :magick => { :geometry => "100x100>" }
+
+ def after_initialize
+ self.creation_time = Time.now.getutc unless self.attribute_present?(:creation_time)
+ end
+
+ def encrypt_password
+ if pass_crypt_confirmation
+ self.pass_salt = OSM::make_token(8)
+ self.pass_crypt = OSM::encrypt_password(pass_crypt, pass_salt)
+ end
+ end
+
+ def self.authenticate(options)
+ if options[:username] and options[:password]
+ user = find(:first, :conditions => ["email = ? OR display_name = ?", options[:username], options[:username]])
+ user = nil if user and user.pass_crypt != OSM::encrypt_password(options[:password], user.pass_salt)
+ elsif options[:token]
+ token = UserToken.find(:first, :include => :user, :conditions => ["user_tokens.token = ?", options[:token]])
+ user = token.user if token
+ end
+
+ if user
+ user = nil unless user.visible? and (user.active? or options[:inactive])
+ end
+
+ token.update_attribute(:expiry, 1.week.from_now) if token and user