challenger

OAuth 2.0-based authentication service that validates user can receive messages at a certain address
Log | Files | Refs | Submodules | README | LICENSE

do_insert_token.h (2506B)


      1 /*
      2    This file is part of Challenger
      3    Copyright (C) 2023 Taler Systems SA
      4 
      5    Challenger is free software; you can redistribute it and/or modify it under the
      6    terms of the GNU General Public License as published by the Free Software
      7    Foundation; either version 3, or (at your option) any later version.
      8 
      9    Challenger is distributed in the hope that it will be useful, but WITHOUT ANY
     10    WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
     11    A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
     12 
     13    You should have received a copy of the GNU General Public License along with
     14    Challenger; see the file COPYING.  If not, see <http://www.gnu.org/licenses/>
     15  */
     16 /**
     17  * @file src/include/challenger-database/do_insert_token.h
     18  * @brief implementation of the do_insert_token function for Postgres
     19  * @author Christian Grothoff
     20  */
     21 #ifndef CHALLENGER_DATABASE_DO_INSERT_TOKEN_H
     22 #define CHALLENGER_DATABASE_DO_INSERT_TOKEN_H
     23 
     24 #include <taler/taler_util.h>
     25 #include <taler/taler_json_lib.h>
     26 #include "challenger_util.h"
     27 #include "challenger_database_lib.h"
     28 
     29 
     30 /**
     31  * Add access @a grant to address under @a nonce, consuming the validation in
     32  * the same statement so that the authorization code cannot be replayed.
     33  *
     34  * Only *solved*, unexpired validations of @a client_id that carry an address
     35  * are consumed; anything else yields #GNUNET_DB_STATUS_SUCCESS_NO_RESULTS,
     36  * which the caller maps to the OAuth 2.0 ``invalid_grant`` error.
     37  *
     38  * @param cls closure
     39  * @param nonce validation process to grant access to
     40  * @param client_id serial id of the authenticated client redeeming the code
     41  * @param grant grant token that grants access
     42  * @param grant_expiration for how long should the grant be valid
     43  * @param address_expiration for how long from now do we consider the address
     44  *        to be valid
     45  * @return transaction status:
     46  *   #GNUNET_DB_STATUS_SUCCESS_ONE_RESULT if the token was minted
     47  *   #GNUNET_DB_STATUS_SUCCESS_NO_RESULTS if there is no solved validation
     48  *     under @a nonce (unknown, unsolved, expired, of another client or
     49  *     already redeemed)
     50  *   #GNUNET_DB_STATUS_HARD_ERROR on failure
     51  */
     52 enum GNUNET_DB_QueryStatus
     53 CHALLENGERDB_do_insert_token (
     54   struct CHALLENGERDB_PostgresContext *ctx,
     55   const struct CHALLENGER_ValidationNonceP *nonce,
     56   uint64_t client_id,
     57   const struct CHALLENGER_AccessTokenP *grant,
     58   struct GNUNET_TIME_Relative grant_expiration,
     59   struct GNUNET_TIME_Relative address_expiration);
     60 
     61 
     62 #endif