Adds a new One time token type. #421
Conversation
This token type is _not_ a JWT and is useful for when you need one time access.
The one time token uses Ecto to keep track of it's contents if it has been used or not.
If a token has already been used it will be as though that token never existed and will not verify.
From the tests:
```elixir
{:ok, claims} = Impl.decode_and_verify(ctx.token)
assert claims["claims"] == ctx.claims["claims"]
assert Impl.resource_from_claims(claims) == {:ok, %{id: ctx.id}}
assert Impl.decode_and_verify(ctx.token) == {:error, :token_not_found_or_expired}
```
See `Guardian.Token.OneTime` for more information
There was a problem hiding this comment.
@hassox I really like this idea mate!
There are a couple of things that make me think this belongs in its own package:
- additional dependencies (even though they are optional).
- assumes Postgres (even though it is my go-to database, its not always going to be possible for everyone).
I think we should put this into a guardian_one_time_token package (or some better, more clever name).
Thoughts?
|
I originally had it in it's own package but put up a q on #ueberauth which came back as put it in core. Does it assume postgres? It's my understanding of ecto that it's just going to use whatever your backing DB is, so long as it's an ecto repo. The OneTimeToken requires that you provide a repo to use with it. |
|
@hassox it was my understanding that MySQL didn't support JSON columns? Or does the MySQL adapter handle that automatically as a |
|
@scrogson MySQL as of 5.7.x supports a JSON datatype. |
|
Looks like this was merged recently: xerions/mariaex#201 However, it's not yet released on I think we have decided to put this into its own package so that we don't block progress on Guardian 1.0. |
This token type is not a JWT and is useful for when you need one time access.
The one time token uses Ecto to keep track of it's contents if it has been used or not.
If a token has already been used it will be as though that token never existed and will not verify.
From the tests:
See
Guardian.Token.OneTimefor more information