Class: Firefighter::TokenGenerator

Inherits:
Object
  • Object
show all
Defined in:
lib/firefighter/token_generator.rb

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(service_account_email:, private_key:, algorithm: 'RS256') ⇒ TokenGenerator 



14
15
16
17
18
 
# File 'lib/firefighter/token_generator.rb', line 14

def initialize(service_account_email:, private_key:, algorithm: 'RS256')
   = 
  @private_key = private_key
  @algorithm = algorithm
end

Class Method Details

.from_env ⇒ Object 



6
7
8
9
10
11
12
 
# File 'lib/firefighter/token_generator.rb', line 6

def self.from_env
  config = {
    service_account_email: ENV['FIREBASE_SERVICE_ACCOUNT_EMAIL'],
    private_key: OpenSSL::PKey::RSA.new(ENV['FIREBASE_PRIVATE_KEY_DATA']),
  }
  new(config)
end

Instance Method Details

#create_access_token(expiration: 60 * 60) ⇒ Object 



21
22
23
24
25
26
27
28
29
30
31
 
# File 'lib/firefighter/token_generator.rb', line 21

def create_access_token(expiration: 60 * 60)
  now_seconds = Time.now.to_i
  payload = {
      iss: ,
      scope: 'https://www.googleapis.com/auth/identitytoolkit',
      aud: 'https://accounts.google.com/o/oauth2/token',
      iat: now_seconds,
      exp: now_seconds + expiration, # Maximum expiration time is one hour
  }
  ::JWT.encode(payload, @private_key, @algorithm)
end

#create_custom_token(uid, data: {}, expiration: 60 * 60) ⇒ Object 



33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/firefighter/token_generator.rb', line 33

def create_custom_token(uid, data: {}, expiration: 60 * 60)
  now_seconds = Time.now.to_i
  payload = {
    iss: ,
    sub: ,
    aud: 'https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit',
    iat: now_seconds,
    exp: now_seconds + expiration, # Maximum expiration time is one hour
    uid: uid,
    data: data,
  }

  ::JWT.encode(payload, @private_key, @algorithm)
end

#read_token(token) ⇒ Object 



48
49
50
 
# File 'lib/firefighter/token_generator.rb', line 48

def read_token(token)
  JWT.decode(token, @private_key, true, algorithm: @algorithm).first
end