authenticateForCode method

Future<AuthCode> authenticateForCode(String? username, String? password, String clientID, { int expirationInSeconds = 600, List<AuthScope>? requestedScopes, })

Creates a one-time use authorization code for a given client ID and user credentials.

This methods works with this instance's delegate to generate and store the authorization code if the credentials are correct. If they are not correct, it will throw the appropriate AuthRequestError.

Implementation

Future<AuthCode> authenticateForCode(
  String? username,
  String? password,
  String clientID, {
  int expirationInSeconds = 600,
  List<AuthScope>? requestedScopes,
}) async {
  if (clientID.isEmpty) {
    throw AuthServerException(AuthRequestError.invalidClient, null);
  }

  final client = await getClient(clientID);
  if (client == null) {
    throw AuthServerException(AuthRequestError.invalidClient, null);
  }

  if (username == null || password == null) {
    throw AuthServerException(AuthRequestError.invalidRequest, client);
  }

  if (client.redirectURI == null) {
    throw AuthServerException(AuthRequestError.unauthorizedClient, client);
  }

  final authenticatable = await delegate.getResourceOwner(this, username);
  if (authenticatable == null) {
    throw AuthServerException(AuthRequestError.accessDenied, client);
  }

  final dbSalt = authenticatable.salt;
  final dbPassword = authenticatable.hashedPassword;
  if (hashPassword(password, dbSalt!) != dbPassword) {
    throw AuthServerException(AuthRequestError.accessDenied, client);
  }

  final validScopes =
      _validatedScopes(client, authenticatable, requestedScopes);
  final authCode = _generateAuthCode(
    authenticatable.id,
    client,
    expirationInSeconds,
    scopes: validScopes,
  );
  await delegate.addCode(this, authCode);
  return authCode;
}