171 lines
3.4 KiB
Elixir
171 lines
3.4 KiB
Elixir
defmodule Comfycamp.SSO do
|
|
@moduledoc """
|
|
The SSO context.
|
|
"""
|
|
|
|
import Ecto.Query, warn: false
|
|
alias Comfycamp.Repo
|
|
|
|
alias Comfycamp.SSO.OIDCApp
|
|
alias Comfycamp.SSO.OIDCCode
|
|
alias Comfycamp.SSO.OIDCRedirectURI
|
|
|
|
@doc """
|
|
Returns the list of oidc_apps.
|
|
|
|
## Examples
|
|
|
|
iex> list_oidc_apps()
|
|
[%OIDCApp{}, ...]
|
|
|
|
"""
|
|
def list_oidc_apps do
|
|
Repo.all(OIDCApp)
|
|
end
|
|
|
|
@doc """
|
|
Gets a single oidc_app.
|
|
|
|
Raises `Ecto.NoResultsError` if the Oidc app does not exist.
|
|
|
|
## Examples
|
|
|
|
iex> get_oidc_app!(123)
|
|
%OIDCApp{}
|
|
|
|
iex> get_oidc_app!(456)
|
|
** (Ecto.NoResultsError)
|
|
|
|
"""
|
|
def get_oidc_app!(id) do
|
|
query =
|
|
from a in OIDCApp,
|
|
preload: [:redirect_uris],
|
|
where: a.client_id == ^id
|
|
|
|
Repo.one!(query)
|
|
end
|
|
|
|
def get_oidc_app_by_secret!(client_secret) do
|
|
query =
|
|
from a in OIDCApp,
|
|
where: a.client_secret == ^client_secret
|
|
|
|
Repo.one!(query)
|
|
end
|
|
|
|
def has_redirect_uri?(client_id, redirect_uri) do
|
|
query =
|
|
from a in OIDCApp,
|
|
join: u in assoc(a, :redirect_uris),
|
|
where: u.uri == ^redirect_uri and a.client_id == ^client_id
|
|
|
|
Repo.aggregate(query, :count) >= 1
|
|
end
|
|
|
|
def get_oidc_redirect_uri!(id), do: Repo.get(OIDCRedirectURI, id)
|
|
|
|
def get_oidc_code!(value) do
|
|
ten_minutes_ago = DateTime.utc_now() |> DateTime.add(-600, :second)
|
|
|
|
query =
|
|
from c in OIDCCode,
|
|
preload: [:oidc_app, :user],
|
|
where: c.value == ^value and c.inserted_at >= ^ten_minutes_ago
|
|
|
|
Repo.one!(query)
|
|
end
|
|
|
|
@doc """
|
|
Creates a oidc_app.
|
|
|
|
## Examples
|
|
|
|
iex> create_oidc_app(%{field: value})
|
|
{:ok, %OIDCApp{}}
|
|
|
|
iex> create_oidc_app(%{field: bad_value})
|
|
{:error, %Ecto.Changeset{}}
|
|
|
|
"""
|
|
def create_oidc_app(attrs \\ %{}) do
|
|
%OIDCApp{}
|
|
|> OIDCApp.creation_changeset(attrs)
|
|
|> Repo.insert()
|
|
end
|
|
|
|
@doc """
|
|
Create a temporary code for OIDC app
|
|
that may be exchanged for an access token.
|
|
"""
|
|
def create_oidc_code(attrs \\ %{}) do
|
|
%OIDCCode{}
|
|
|> OIDCCode.changeset(attrs)
|
|
|> Repo.insert()
|
|
end
|
|
|
|
def create_oidc_redirect_uri(attrs \\ %{}) do
|
|
%OIDCRedirectURI{}
|
|
|> OIDCRedirectURI.changeset(attrs)
|
|
|> Repo.insert()
|
|
end
|
|
|
|
@doc """
|
|
Updates a oidc_app.
|
|
|
|
## Examples
|
|
|
|
iex> update_oidc_app(oidc_app, %{field: new_value})
|
|
{:ok, %OIDCApp{}}
|
|
|
|
iex> update_oidc_app(oidc_app, %{field: bad_value})
|
|
{:error, %Ecto.Changeset{}}
|
|
|
|
"""
|
|
def update_oidc_app(%OIDCApp{} = oidc_app, attrs) do
|
|
oidc_app
|
|
|> OIDCApp.update_changeset(attrs)
|
|
|> Repo.update()
|
|
end
|
|
|
|
@doc """
|
|
Deletes a oidc_app.
|
|
|
|
## Examples
|
|
|
|
iex> delete_oidc_app(oidc_app)
|
|
{:ok, %OIDCApp{}}
|
|
|
|
iex> delete_oidc_app(oidc_app)
|
|
{:error, %Ecto.Changeset{}}
|
|
|
|
"""
|
|
def delete_oidc_app(%OIDCApp{} = oidc_app) do
|
|
Repo.delete(oidc_app)
|
|
end
|
|
|
|
def delete_oidc_code(%OIDCCode{} = code) do
|
|
Repo.delete(code)
|
|
end
|
|
|
|
def delete_oidc_redirect_uri(%OIDCRedirectURI{} = uri) do
|
|
Repo.delete(uri)
|
|
end
|
|
|
|
@doc """
|
|
Returns an `%Ecto.Changeset{}` for tracking oidc_app changes.
|
|
|
|
## Examples
|
|
|
|
iex> change_oidc_app(oidc_app)
|
|
%Ecto.Changeset{data: %OIDCApp{}}
|
|
|
|
"""
|
|
def change_oidc_app(%OIDCApp{} = oidc_app, attrs \\ %{}) do
|
|
OIDCApp.update_changeset(oidc_app, attrs)
|
|
end
|
|
|
|
def change_oidc_redirect_uri(%OIDCRedirectURI{} = oidc_redirect_uri, attrs \\ %{}) do
|
|
OIDCRedirectURI.changeset(oidc_redirect_uri, attrs)
|
|
end
|
|
end
|