table

RequestTokens are stored in the table oauth_request_tokens.

after_set_authorized

This will set the authorized_by to the current user. It will also refresh the valid_until to be active for another hour.

can_trade_for_access_token

This neatly encapsulates the "is this request token perfect?" check.

This will return a (boolean, message) pair, with boolean indicating success (true means the token is good) and message indicating error (or another affirmation of success).

current_user_can

Only root may have access to this model.