gimmyxd/mentors4me-api

# frozen_string_literal: true

module Authenticable
  # Public: validates the token
  # returns - boolean
  def authenticate
    validate_token || render_unauthorized
  end

  # Public: handles invalid token
  # returns - API error
  def render_unauthorized
    headers['WWW-Authenticate'] = 'Token realm="Application"'
    raise Api::BaseController::InvalidAPIRequest.new('unauthorized', 401)
  end

  # Public: verifies validation of token
  # token - authentication_token
  # returns - boolean
  def validate_token(token = nil)
    token ||= request.headers['Authorization']
    return unless token

    user = User.find_by(auth_token: token)
    return if user.blank?

    user[:auth_token_created_at] + 24.hours > Time.zone.now
  end

  # Public: verifies validation of token
  # token - authentication_token
  # returns - boolean
  def authenticate_create(token = nil)
    token ||= request.headers['Authorization']
    return if token.present? && Proposal.where(auth_token: token).any?

    raise Api::BaseController::InvalidAPIRequest.new('unauthorized', 401)
  end

  # Public: Devise methods overwrites
  # returns User
  def current_user
    User.find_by(auth_token: request.headers['Authorization'])
  end
end