1 /*
2  *  Make.org Core API
3  *  Copyright (C) 2018 Make.org
4  *
5  * This program is free software: you can redistribute it and/or modify
6  *  it under the terms of the GNU Affero General Public License as
7  *  published by the Free Software Foundation, either version 3 of the
8  *  License, or (at your option) any later version.
9  *
10  *  This program is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13  *  GNU Affero General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Affero General Public License
16  *  along with this program.  If not, see <https://www.gnu.org/licenses/>.
17  *
18  */
19 
20 package org.make.core.auth
21 
22 import org.make.core.operation.OperationId
23 
24 import java.time.ZonedDateTime
25 import org.make.core.{DateHelper, Timestamped}
26 import org.make.core.question.QuestionId
27 import org.make.core.user.{OidcInfo, Role, User, UserId}
28 
29 final case class Token(
30   accessToken: String,
31   refreshToken: Option[String],
32   scope: Option[String],
33   expiresIn: Int,
34   refreshExpiresIn: Int,
35   user: UserRights,
36   client: Client,
37   override val createdAt: Option[ZonedDateTime] = None,
38   override val updatedAt: Option[ZonedDateTime] = None
39 ) extends Timestamped {
40 
41   def isAccessTokenExpired: Boolean = {
42     isExpiredAfter(expiresIn)
43   }
44   def isRefreshTokenExpired: Boolean = {
45     isExpiredAfter(refreshExpiresIn)
46   }
47 
48   private def isExpiredAfter(interval: Int) = {
49     createdAt.forall { date =>
50       date.plusSeconds(interval).isBefore(DateHelper.now())
51     }
52   }
53 }
54 
55 final case class UserRights(
56   userId: UserId,
57   roles: Seq[Role],
58   availableQuestions: Seq[QuestionId],
59   emailVerified: Boolean,
60   oidcInfos: Option[Map[OperationId, OidcInfo]] = None
61 )
62 
63 object UserRights {
64   def fromUser(user: User): UserRights = {
65     UserRights(user.userId, user.roles, user.availableQuestions, user.emailVerified, user.profile.flatMap(_.oidcInfos))
66   }
67 }