34 lines
846 B
Ruby
34 lines
846 B
Ruby
module OpenidConnect
|
|
module Authorization
|
|
class EndpointStartPoint < Endpoint
|
|
def initialize(current_user)
|
|
super(current_user)
|
|
end
|
|
|
|
def handle_response_type(req, res)
|
|
@response_type = req.response_type
|
|
end
|
|
|
|
def build_attributes(req, res)
|
|
super(req, res)
|
|
verify_nonce(req, res)
|
|
build_scopes(req)
|
|
# TODO: buildRequestObject(req)
|
|
end
|
|
|
|
def verify_nonce(req, res)
|
|
if res.protocol_params_location == :fragment && req.nonce.blank?
|
|
req.invalid_request! "nonce required"
|
|
end
|
|
end
|
|
|
|
def build_scopes(req)
|
|
@scopes = req.scope.map {|scope|
|
|
Scope.where(name: scope).first.tap do |scope|
|
|
req.invalid_scope! "Unknown scope: #{scope}" unless scope
|
|
end
|
|
}
|
|
end
|
|
end
|
|
end
|
|
end
|