oauth2_mock_backend.erl

%% ----------------------------------------------------------------------------
%%
%% oauth2: Erlang OAuth 2.0 implementation
%%
%% Copyright (c) 2012-2014 Kivra
%%
%% Permission is hereby granted, free of charge, to any person obtaining a
%% copy of this software and associated documentation files (the "Software"),
%% to deal in the Software without restriction, including without limitation
%% the rights to use, copy, modify, merge, publish, distribute, sublicense,
%% and/or sell copies of the Software, and to permit persons to whom the
%% Software is furnished to do so, subject to the following conditions:
%%
%% The above copyright notice and this permission notice shall be included in
%% all copies or substantial portions of the Software.
%%
%% THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
%% IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
%% FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
%% AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
%% LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
%% FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
%% DEALINGS IN THE SOFTWARE.
%%
%% ----------------------------------------------------------------------------

-module(oauth2_mock_backend).

-behavior(oauth2_backend).

%%% Behavior API
-export([authenticate_user/2]).
-export([retrieve_user_claims/2]).
-export([authenticate_client/2]).
-export([get_client_identity/2]).
-export([associate_access_code/3]).
-export([associate_refresh_token/3]).
-export([associate_access_token/3]).
-export([resolve_access_code/2]).
-export([resolve_refresh_token/2]).
-export([resolve_access_token/2]).
-export([revoke_access_code/2]).
-export([revoke_access_token/2]).
-export([revoke_refresh_token/2]).
-export([get_redirection_uri/2]).
-export([verify_redirection_uri/3]).
-export([verify_client_scope/3]).
-export([verify_resowner_scope/3]).
-export([verify_scope/3]).

%%% mock_backend-specifics
-export([start/0]).
-export([stop/0]).

%%% Placeholder values that the mock backend will recognize.
-define(UNAME,     <<"herp">>).
-define(PASSWORD,  <<"derp">>).
-define(USCOPE,    [<<"xyz">>]).
-define(RES_OWNER, <<"user">>).
-define(CLAIMS,    [{<<"is_admin">>, true}, {<<"can_delete">>, true}]).

-define(CID,        <<"TiaUdYODLOMyLkdaKkqlmhsl9QJ94a">>).
-define(SECRET,     <<"fvfDMAwjlruC9rv5FsLjmyrihCcIKJL">>).
-define(CSCOPE,     <<"abc">>).
-define(CLIENT_URI, <<"https://no.where/cb">>).

-define(ETS_TABLE, access_tokens).

%%%===================================================================
%%% API
%%%===================================================================

authenticate_user({?UNAME, ?PASSWORD}, Ctx) -> {ok, {Ctx, {user, 31337}}};
authenticate_user({?UNAME, _}, _)           -> {error, badpass};
authenticate_user(_, _)                     -> {error, notfound}.

retrieve_user_claims(?UNAME, Ctx) ->
    {ok, {Ctx, ?CLAIMS}};
retrieve_user_claims(_, _) ->
    {error, notfound}.


authenticate_client({?CID, ?SECRET}, Ctx) -> {ok, {Ctx, {client, 4711}}};
authenticate_client({?CID, _}, _)         -> {error, badsecret};
authenticate_client(_, _)                 -> {error, notfound}.

get_client_identity(?CID, Ctx) -> {ok, {Ctx, {client, 4711}}};
get_client_identity(_, _)      -> {error, notfound}.

associate_access_code(AccessCode, Context, AppContext) ->
    associate_access_token(AccessCode, Context, AppContext).

associate_refresh_token(RefreshToken, Context, AppContext) ->
    ets:insert(?ETS_TABLE, {RefreshToken, Context}),
    {ok, AppContext}.

associate_access_token(AccessToken, Context, AppContext) ->
    ets:insert(?ETS_TABLE, {AccessToken, Context}),
    {ok, AppContext}.

resolve_access_code(AccessCode, AppContext) ->
    resolve_access_token(AccessCode, AppContext).

resolve_refresh_token(RefreshToken, AppContext) ->
    resolve_access_token(RefreshToken, AppContext).

resolve_access_token(AccessToken, AppContext) ->
    case ets:lookup(?ETS_TABLE, AccessToken) of
        []             -> {error, notfound};
        [{_, Context}] -> {ok, {AppContext, Context}}
    end.

revoke_access_code(AccessCode, AppContext) ->
    revoke_access_token(AccessCode, AppContext).

revoke_access_token(AccessToken, AppContext) ->
    ets:delete(?ETS_TABLE, AccessToken),
    {ok, AppContext}.

revoke_refresh_token(_RefreshToken, AppContext) ->
    {ok, AppContext}.

get_redirection_uri({?CID, ?SECRET}, Ctx) -> {ok, {Ctx, ?CLIENT_URI}};
get_redirection_uri(_, _)                 -> {error, notfound}.

verify_redirection_uri({client, 4711}, ?CLIENT_URI, Ctx) -> {ok, Ctx};
verify_redirection_uri(_, _, _)                          -> {error, mismatch}.

verify_client_scope({client, 4711}, [], Ctx)      -> {ok, {Ctx, []}};
verify_client_scope({client, 4711}, ?CSCOPE, Ctx) -> {ok, {Ctx, ?CSCOPE}};
verify_client_scope(_, _, _)                       -> {error, invalid_scope}.

verify_resowner_scope({user, 31337}, ?USCOPE, Ctx) -> {ok, {Ctx, ?USCOPE}};
verify_resowner_scope(_, _, _)                     -> {error, invalid_scope}.

verify_scope(Scope, Scope, AppContext) -> {ok, {AppContext, Scope}};
verify_scope(_, _, _)                  -> {error, invalid_scope}.

%% Set up the ETS table for holding access tokens.
start() -> ets:new(?ETS_TABLE, [public, named_table, {read_concurrency, true}]).
stop()  -> ets:delete(?ETS_TABLE).

%%%_* Tests ============================================================
-ifdef(TEST).
-include_lib("eunit/include/eunit.hrl").

-endif.

%%%_* Emacs ============================================================
%%% Local Variables:
%%% allout-layout: t
%%% erlang-indent-level: 4
%%% End: