59 lines
		
	
	
	
		
			1.7 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
			
		
		
	
	
			59 lines
		
	
	
	
		
			1.7 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
| # Pleroma: A lightweight social networking server
 | |
| # Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
 | |
| # SPDX-License-Identifier: AGPL-3.0-only
 | |
| 
 | |
| defmodule Pleroma.Helpers.AuthHelper do
 | |
|   alias Pleroma.Web.Plugs.OAuthScopesPlug
 | |
|   alias Plug.Conn
 | |
| 
 | |
|   import Plug.Conn
 | |
| 
 | |
|   @oauth_token_session_key :oauth_token
 | |
|   @oauth_user_session_key :oauth_user
 | |
| 
 | |
|   @doc """
 | |
|   Skips OAuth permissions (scopes) checks, assigns nil `:token`.
 | |
|   Intended to be used with explicit authentication and only when OAuth token cannot be determined.
 | |
|   """
 | |
|   def skip_oauth(conn) do
 | |
|     conn
 | |
|     |> assign(:token, nil)
 | |
|     |> OAuthScopesPlug.skip_plug()
 | |
|   end
 | |
| 
 | |
|   @doc "Drops authentication info from connection"
 | |
|   def drop_auth_info(conn) do
 | |
|     # To simplify debugging, setting a private variable on `conn` if auth info is dropped
 | |
|     conn
 | |
|     |> assign(:user, nil)
 | |
|     |> assign(:token, nil)
 | |
|     |> put_private(:authentication_ignored, true)
 | |
|   end
 | |
| 
 | |
|   @doc "Gets OAuth token string from session"
 | |
|   def get_session_token(%Conn{} = conn) do
 | |
|     get_session(conn, @oauth_token_session_key)
 | |
|   end
 | |
| 
 | |
|   @doc "Updates OAuth token string in session"
 | |
|   def put_session_token(%Conn{} = conn, token) when is_binary(token) do
 | |
|     put_session(conn, @oauth_token_session_key, token)
 | |
|   end
 | |
| 
 | |
|   @doc "Deletes OAuth token string from session"
 | |
|   def delete_session_token(%Conn{} = conn) do
 | |
|     delete_session(conn, @oauth_token_session_key)
 | |
|   end
 | |
| 
 | |
|   def put_session_user(%Conn{} = conn, user) do
 | |
|     put_session(conn, @oauth_user_session_key, user)
 | |
|   end
 | |
| 
 | |
|   def delete_session_user(%Conn{} = conn) do
 | |
|     delete_session(conn, @oauth_user_session_key)
 | |
|   end
 | |
| 
 | |
|   def get_session_user(%Conn{} = conn) do
 | |
|     get_session(conn, @oauth_user_session_key)
 | |
|   end
 | |
| end
 | 
