forgeplus/app/forms/oauth_educoder_form.rb

class OauthEducoderForm
  include ActiveModel::Model

  attr_accessor :login, :token, :mail, :callback_url

  validates :login, presence: true
  validates :token, presence: true
  validates :mail, presence: true
  validates :callback_url, presence: true

  validate :check_callback_url!
  validate :check_auth!

  def check_auth!
    secret = OauthEducoder.config[:access_key_secret]
    before_raw_pay_load = Digest::SHA1.hexdigest("#{login}#{secret}#{Time.now.to_i/60-1}")
    now_raw_pay_load = Digest::SHA1.hexdigest("#{login}#{secret}#{Time.now.to_i/60}")

    if token != now_raw_pay_load && token != before_raw_pay_load
      raise '你的请求无效值无效.'
    end
  end

  def check_callback_url!
    request_host = URI.parse(callback_url).host
    callback_url = OauthEducoder.config[:callback_url_host]

    raise 'callback_url参数无效.' if request_host != callback_url
  end

end