X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/7b89dc63496de0b6131a93c57d283ebb4490804b..337bda6a90b8d37a533f334ad50f3893c55b8e57:/app/controllers/oauth_controller.rb?ds=sidebyside diff --git a/app/controllers/oauth_controller.rb b/app/controllers/oauth_controller.rb index 3c56a4bf4..2e847fcd5 100644 --- a/app/controllers/oauth_controller.rb +++ b/app/controllers/oauth_controller.rb @@ -1,9 +1,9 @@ -require 'oauth/controllers/provider_controller' +require "oauth/controllers/provider_controller" class OauthController < ApplicationController include OAuth::Controllers::ProviderController - layout 'slim' + layout "site" def login_required authorize_web @@ -27,11 +27,51 @@ class OauthController < ApplicationController end def revoke - @token = current_user.oauth_tokens.find_by_token params[:token] + @token = current_user.oauth_tokens.find_by :token => params[:token] if @token @token.invalidate! - flash[:notice] = t('oauth.revoke.flash', :application => @token.client_application.name) + flash[:notice] = t("oauth.revoke.flash", :application => @token.client_application.name) + end + redirect_to oauth_clients_url(:display_name => @token.user.display_name) + end + + protected + + def oauth1_authorize + if @token.invalidated? + @message = t "oauth.oauthorize_failure.invalid" + render :action => "authorize_failure" + elsif request.post? + if user_authorizes_token? + @token.authorize!(current_user) + callback_url = if @token.oauth10? + params[:oauth_callback] || @token.client_application.callback_url + else + @token.oob? ? @token.client_application.callback_url : @token.callback_url + end + @redirect_url = URI.parse(callback_url) unless callback_url.blank? + + if @redirect_url.to_s.blank? + render :action => "authorize_success" + else + @redirect_url.query = if @redirect_url.query.blank? + "oauth_token=#{@token.token}" + else + @redirect_url.query + + "&oauth_token=#{@token.token}" + end + + unless @token.oauth10? + @redirect_url.query += "&oauth_verifier=#{@token.verifier}" + end + + redirect_to @redirect_url.to_s + end + else + @token.invalidate! + @message = t("oauth.oauthorize_failure.denied", :app_name => @token.client_application.name) + render :action => "authorize_failure" + end end - redirect_to :controller => 'oauth_clients', :action => 'index' end end