-
-
Notifications
You must be signed in to change notification settings - Fork 33
/
client-credentials-grant-type.js
111 lines (87 loc) 路 2.58 KB
/
client-credentials-grant-type.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
'use strict';
/**
* Module dependencies.
*/
var AbstractGrantType = require('./abstract-grant-type');
var InvalidArgumentError = require('../errors/invalid-argument-error');
var InvalidGrantError = require('../errors/invalid-grant-error');
var Promise = require('bluebird');
var promisify = require('promisify-any').use(Promise);
var util = require('util');
/**
* Constructor.
*/
function ClientCredentialsGrantType(options) {
options = options || {};
if (!options.model) {
throw new InvalidArgumentError('Missing parameter: `model`');
}
if (!options.model.getUserFromClient) {
throw new InvalidArgumentError('Invalid argument: model does not implement `getUserFromClient()`');
}
if (!options.model.saveToken) {
throw new InvalidArgumentError('Invalid argument: model does not implement `saveToken()`');
}
AbstractGrantType.call(this, options);
}
/**
* Inherit prototype.
*/
util.inherits(ClientCredentialsGrantType, AbstractGrantType);
/**
* Handle client credentials grant.
*
* @see https://tools.ietf.org/html/rfc6749#section-4.4.2
*/
ClientCredentialsGrantType.prototype.handle = function(request, client) {
if (!request) {
throw new InvalidArgumentError('Missing parameter: `request`');
}
if (!client) {
throw new InvalidArgumentError('Missing parameter: `client`');
}
var scope = this.getScope(request);
return Promise.bind(this)
.then(function() {
return this.getUserFromClient(client);
})
.then(function(user) {
return this.saveToken(user, client, scope);
});
};
/**
* Retrieve the user using client credentials.
*/
ClientCredentialsGrantType.prototype.getUserFromClient = function(client) {
return promisify(this.model.getUserFromClient, 1).call(this.model, client)
.then(function(user) {
if (!user) {
throw new InvalidGrantError('Invalid grant: user credentials are invalid');
}
return user;
});
};
/**
* Save token.
*/
ClientCredentialsGrantType.prototype.saveToken = function(user, client, scope) {
var fns = [
this.validateScope(user, client, scope),
this.generateAccessToken(client, user, scope),
this.getAccessTokenExpiresAt(client, user, scope)
];
return Promise.all(fns)
.bind(this)
.spread(function(scope, accessToken, accessTokenExpiresAt) {
var token = {
accessToken: accessToken,
accessTokenExpiresAt: accessTokenExpiresAt,
scope: scope
};
return promisify(this.model.saveToken, 3).call(this.model, token, client, user);
});
};
/**
* Export constructor.
*/
module.exports = ClientCredentialsGrantType;