1 /*
2  *  Make.org Core API
3  *  Copyright (C) 2018 Make.org
4  *
5  * This program is free software: you can redistribute it and/or modify
6  *  it under the terms of the GNU Affero General Public License as
7  *  published by the Free Software Foundation, either version 3 of the
8  *  License, or (at your option) any later version.
9  *
10  *  This program is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13  *  GNU Affero General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Affero General Public License
16  *  along with this program.  If not, see <https://www.gnu.org/licenses/>.
17  *
18  */
19 
20 package org.make.api.technical.auth
21 
22 import java.util.UUID
23 
24 import org.make.api.technical.security.SecurityHelper
25 
26 import scala.concurrent.ExecutionContext.Implicits.global
27 import scala.concurrent.Future
28 
29 trait TokenGeneratorComponent {
30   def tokenGenerator: TokenGenerator
31 }
32 
33 trait TokenGenerator {
34   val MAX_RETRY = 3
35 
36   def tokenToHash(token: String): String
37   def generateToken(tokenExistsFunction: String => Future[Boolean], depth: Int = MAX_RETRY): Future[(String, String)]
38   def newRandomToken(): (String, String)
39 }
40 
41 trait DefaultTokenGeneratorComponent extends TokenGeneratorComponent {
42 
43   override lazy val tokenGenerator: TokenGenerator = new DefaultTokenGenerator
44 
45   class DefaultTokenGenerator extends TokenGenerator {
46 
47     override def tokenToHash(token: String): String =
48       SecurityHelper.defaultHash(token).toUpperCase()
49 
50     @SuppressWarnings(Array("org.wartremover.warts.Recursion"))
51     override def generateToken(
52       tokenExistsFunction: String => Future[Boolean],
53       depth: Int = MAX_RETRY
54     ): Future[(String, String)] = {
55       if (depth <= 0) {
56         Future.failed(new RuntimeException("Token generation failed due to max retries reached."))
57       } else {
58         val (token, hashedToken): (String, String) = newRandomToken()
59         tokenExistsFunction(hashedToken).flatMap { exists =>
60           if (exists) {
61             generateToken(tokenExistsFunction, depth - 1)
62           } else {
63             Future.successful((token, hashedToken))
64           }
65         }
66       }
67     }
68 
69     override def newRandomToken(): (String, String) = {
70       val token = UUID.randomUUID().toString
71 
72       (token, tokenToHash(token))
73     }
74   }
75 }