duse-io/api

require "openssl"
require "securerandom"
require "duse/api"

module Duse
  module API
    module Models
      class Token < ActiveRecord::Base
        before_save :renew_last_used
        belongs_to :user

        def still_valid?
          self.last_used_at > 30.days.ago
        end

        def use!
          renew_last_used
          save
        end

        def renew_last_used
          self.last_used_at = Time.now
        end

        class << self
          def generate_safe_token
            token = nil
            token_hash = nil
            loop do
              token = SecureRandom.urlsafe_base64(15).tr("lIO0", "sxyz")
              token_hash = Encryption.hmac(Duse::API.config.secret_key, token)
              break if find_by_token_hash(token_hash).nil?
            end
            { content: token, hash: token_hash }
          end

          def create_safe_token(user)
            safe_token = generate_safe_token
            token = create(token_hash: safe_token.fetch(:hash), user: user)
            safe_token.fetch(:content)
          end

          def find_by_raw_token(raw_token)
            token_hash = Encryption.hmac(Duse::API.config.secret_key, raw_token)
            find_by_token_hash(token_hash)
          end
        end
      end

      class ApiToken < Token
      end

      class ConfirmationToken < Token
      end

      class ForgotPasswordToken < Token
      end
    end
  end
end