Class: DuodealerAPI::Session

Inherits:
Object
  • Object
show all
Defined in:
lib/duodealer_api/session.rb

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(domain:, token:, api_version:, extra: {}) ⇒ Session

Returns a new instance of Session.



86
87
88
89
90
91
 
# File 'lib/duodealer_api/session.rb', line 86

def initialize(domain:, token:, api_version:, extra: {})
  self.domain = self.class.prepare_domain(domain)
  self.api_version = api_version
  self.token = token
  self.extra = extra
end

Instance Attribute Details

#api_version ⇒ Object

Returns the value of attribute api_version.



13
14
15
 
# File 'lib/duodealer_api/session.rb', line 13

def api_version
  @api_version
end

#domain ⇒ Object Also known as: url

Returns the value of attribute domain.



12
13
14
 
# File 'lib/duodealer_api/session.rb', line 12

def domain
  @domain
end

#extra ⇒ Object

Returns the value of attribute extra.



12
13
14
 
# File 'lib/duodealer_api/session.rb', line 12

def extra
  @extra
end

#name ⇒ Object

Returns the value of attribute name.



12
13
14
 
# File 'lib/duodealer_api/session.rb', line 12

def name
  @name
end

#token ⇒ Object

Returns the value of attribute token.



12
13
14
 
# File 'lib/duodealer_api/session.rb', line 12

def token
  @token
end

Class Method Details

.prepare_domain(domain) ⇒ Object 



46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'lib/duodealer_api/session.rb', line 46

def prepare_domain(domain)
  return nil if domain.blank?
  # remove http:// or https://
  domain = domain.strip.gsub(%r{\Ahttps?://}, '')
  # extract host, removing any username, password or path
  shop = URI.parse("https://#{domain}").host
  # extract subdomain of .duodealer.com
  if idx = shop.index(".")
    shop = shop.slice(0, idx)
  end
  return nil if shop.empty?
  "#{shop}.#{duodealer_domain}"
rescue URI::InvalidURIError
  nil
end

.setup(params) ⇒ Object 



18
19
20
 
# File 'lib/duodealer_api/session.rb', line 18

def setup(params)
  params.each { |k,value| public_send("#{k}=", value) }
end

.temp(domain:, token:, api_version:, &block) ⇒ Object 



22
23
24
25
26
 
# File 'lib/duodealer_api/session.rb', line 22

def temp(domain:, token:, api_version:, &block)
  session = new(domain: domain, token: token, api_version: api_version)

  with_session(session, &block)
end

.validate_signature(params) ⇒ Object 



62
63
64
65
66
67
68
69
 
# File 'lib/duodealer_api/session.rb', line 62

def validate_signature(params)
  params = (params.respond_to?(:to_unsafe_hash) ? params.to_unsafe_hash : params).with_indifferent_access
  return false unless signature = params[:hmac]

  calculated_signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new(), secret, encoded_params_for_signature(params))

  Rack::Utils.secure_compare(calculated_signature, signature)
end

.with_session(session, &_block) ⇒ Object 



28
29
30
31
32
33
34
35
36
37
 
# File 'lib/duodealer_api/session.rb', line 28

def with_session(session, &_block)
  original_session = extract_current_session

  begin
    DuodealerAPI::Base.activate_session(session)
    yield
  ensure
    DuodealerAPI::Base.activate_session(original_session)
  end
end

.with_version(api_version, &block) ⇒ Object 



39
40
41
42
43
44
 
# File 'lib/duodealer_api/session.rb', line 39

def with_version(api_version, &block)
  original_session = extract_current_session
  session = new(domain: original_session.site, token: original_session.token, api_version: api_version)

  with_session(session, &block)
end

Instance Method Details

#create_permission_url(scope, redirect_uri, options = {}) ⇒ Object 



93
94
95
96
97
 
# File 'lib/duodealer_api/session.rb', line 93

def create_permission_url(scope, redirect_uri, options = {})
  params = { client_id: api_key, scope: scope.join(','), redirect_uri: redirect_uri }
  params[:state] = options[:state] if options[:state]
  construct_oauth_url("authorize", params)
end

#expired? ⇒ Boolean

Returns:

  • (Boolean) 


146
147
148
149
 
# File 'lib/duodealer_api/session.rb', line 146

def expired?
  return false if expires_in.nil?
  expires_in <= 0
end

#expires_at ⇒ Object 



141
142
143
144
 
# File 'lib/duodealer_api/session.rb', line 141

def expires_at
  return unless extra.present?
  @expires_at ||= Time.at(extra['expires_at']).utc
end

#expires_in ⇒ Object 



136
137
138
139
 
# File 'lib/duodealer_api/session.rb', line 136

def expires_in
  return unless expires_at.present?
  [0, expires_at.to_i - Time.now.utc.to_i].max
end

#request_token(params) ⇒ Object 



99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
 
# File 'lib/duodealer_api/session.rb', line 99

def request_token(params)
  return token if token

  unless self.class.validate_signature(params) && params[:timestamp].to_i > 24.hours.ago.utc.to_i
    raise DuodealerAPI::ValidationException, "Invalid Signature: Possible malicious login"
  end

  response = access_token_request(params[:code])
  if response.code == "200"
    self.extra = JSON.parse(response.body)
    self.token = extra.delete('access_token')

    if expires_in = extra.delete('expires_in')
      extra['expires_at'] = Time.now.utc.to_i + expires_in
    end
    token
  else
    raise RuntimeError, response.msg
  end
end

#shop ⇒ Object 



120
121
122
 
# File 'lib/duodealer_api/session.rb', line 120

def shop
  Shop.current
end

#site ⇒ Object 



124
125
126
 
# File 'lib/duodealer_api/session.rb', line 124

def site
  "https://#{domain}"
end

#valid? ⇒ Boolean

Returns:

  • (Boolean) 


132
133
134
 
# File 'lib/duodealer_api/session.rb', line 132

def valid?
  domain.present? && token.present? && api_version.is_a?(ApiVersion)
end