All files / universal.klown/gpii/node_modules/gpii-oauth2/gpii-oauth2-authz-server/src CodeGenerator.js

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1x
1x
 
1x
 
 
 
 
 
 
 
 
 
 
 
1x
 
 
 
 
 
 
1x
 
 
 
20x
 
 
/*!
Copyright 2014 OCAD university
 
Licensed under the New BSD license. You may not use this file except in
compliance with this License.
 
The research leading to these results has received funding from the European Union's
Seventh Framework Programme (FP7/2007-2013) under grant agreement no. 289016.
 
You may obtain a copy of the License at
https://github.com/GPII/universal/blob/master/LICENSE.txt
*/
 
"use strict";
 
var fluid = require("infusion");
var crypto = require("crypto");
 
var gpii = fluid.registerNamespace("gpii");
 
// The gpii.oauth2.codeGenerator component is responsible for generating OAuth 2 access tokens.
// The codes and tokens generated must be unguessable.
//
// The implementation uses the Node.js crypto module and was originally part of the
// gpii.oauth2.authorizationService component.
// The code generation functionality was moved to its own component to
// remove dependencies on Node.js from the authorizationService, so
// that the authorzationService could be unit tested with
// browser-based testing.
 
fluid.defaults("gpii.oauth2.codeGenerator", {
    gradeNames: ["fluid.component"],
    invokers: {
        generateAccessToken: "gpii.oauth2.codeGenerator.generateAccessToken"
    }
});
 
gpii.oauth2.codeGenerator.generateAccessToken = function () {
    // TODO: Ensure that handles cannot be guessed
    // TODO: crypto.randomBytes can fail if there is not enough entropy
    // see http://nodejs.org/api/crypto.html
    return crypto.randomBytes(16).toString("hex");
};