Module: MixinBot::API::Auth

Included in:
MixinBot::API
Defined in:
lib/mixin_bot/api/auth.rb

Instance Method Summary collapse

Instance Method Details

#access_token(method, uri, body = '', exp_in: 600, scp: 'FULL') ⇒ Object 



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'lib/mixin_bot/api/auth.rb', line 6

def access_token(method, uri, body = '', exp_in: 600, scp: 'FULL')
  sig = Digest::SHA256.hexdigest(method + uri + body.to_s)
  iat = Time.now.utc.to_i
  exp = (Time.now.utc + exp_in).to_i
  jti = SecureRandom.uuid
  payload = {
    uid: client_id,
    sid: session_id,
    iat: iat,
    exp: exp,
    jti: jti,
    sig: sig,
    scp: scp
  }
  if pin_token.size == 32
    jwk = JOSE::JWK.from_okp [:Ed25519, private_key]
    jws = JOSE::JWS.from({ 'alg' => 'EdDSA' })
  else
    jwk = JOSE::JWK.from_pem private_key
    jws = JOSE::JWS.from({ 'alg' => 'RS512' })
  end

  jwt = JOSE::JWT.from payload
  JOSE::JWT.sign(jwk, jws, jwt).compact
end

#oauth_token(code) ⇒ Object 



32
33
34
35
36
37
38
39
40
41
42
43
44
 
# File 'lib/mixin_bot/api/auth.rb', line 32

def oauth_token(code)
  path = 'oauth/token'
  payload = {
    client_id: client_id,
    client_secret: client_secret,
    code: code
  }
  r = client.post(path, json: payload)

  raise r.inspect if r['error'].present?

  r['data']&.[]('access_token')
end

#request_oauth(scope = nil) ⇒ Object 



46
47
48
49
50
51
52
53
 
# File 'lib/mixin_bot/api/auth.rb', line 46

def request_oauth(scope = nil)
  scope ||= (MixinBot.scope || 'PROFILE:READ')
  format(
    'https://mixin.one/oauth/authorize?client_id=%<client_id>s&scope=%<scope>s',
    client_id: client_id,
    scope: scope
  )
end