Class: Reflect::ProjectTokenBuilder

Inherits:
Object
  • Object
show all
Defined in:
lib/reflect/token.rb

Constant Summary collapse

VIEW_IDENTIFIERS_CLAIM_NAME = 
'http://reflect.io/s/v3/vid'
PARAMETERS_CLAIM_NAME = 
'http://reflect.io/s/v3/p'
ATTRIBUTES_CLAIM_NAME = 
'http://reflect.io/s/v3/a'

Instance Method Summary collapse

Constructor Details

#initialize(access_key) ⇒ ProjectTokenBuilder

Returns a new instance of ProjectTokenBuilder.



11
12
13
14
15
16
17
18
 
# File 'lib/reflect/token.rb', line 11

def initialize(access_key)
  @access_key = access_key

  @expiration = nil
  @view_identifiers = []
  @parameters = []
  @attributes = {}
end

Instance Method Details

#add_parameter(parameter) ⇒ Object 



30
31
32
33
 
# File 'lib/reflect/token.rb', line 30

def add_parameter(parameter)
  @parameters << parameter
  self
end

#add_view_identifier(id) ⇒ Object 



25
26
27
28
 
# File 'lib/reflect/token.rb', line 25

def add_view_identifier(id)
  @view_identifiers << id
  self
end

#build(secret_key) ⇒ Object 



40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
 
# File 'lib/reflect/token.rb', line 40

def build(secret_key)
  key_bytes = secret_key.scan(/[0-9a-f]{4}/).map { |x| x.to_i(16) }
  key = key_bytes.pack('n*')

  now = Time.now.to_i

  payload = {
    :iat => now,
    :nbf => now,
  }

  payload[:exp] = @expiration unless @expiration.nil?

  payload[VIEW_IDENTIFIERS_CLAIM_NAME] = @view_identifiers unless @view_identifiers.empty?
  payload[PARAMETERS_CLAIM_NAME] = @parameters unless @parameters.empty?
  payload[ATTRIBUTES_CLAIM_NAME] = @attributes unless @attributes.empty?

  # The default JWE encryption mechanism doesn't let us specify the
  # additional header fields we need, so let's do it by hand.
  header = {
    alg: 'dir',
    enc: 'A128GCM',
    zip: 'DEF',
    cty: 'JWT',
    kid: @access_key,
  }

  zipped_payload = JWE::Zip.for(header[:zip]).new.send(:compress, JSON.generate(payload))
  json_header = JSON.generate(header)

  cipher = JWE::Enc.for(header[:enc]).new
  cipher.cek = key

  bin = cipher.encrypt(zipped_payload, JWE::Base64.jwe_encode(json_header))
  encrypted_cek = JWE::Alg.for(header[:alg]).new(key).encrypt(cipher.cek)

  JWE::Serialization::Compact.encode(json_header, encrypted_cek, cipher.iv, bin, cipher.tag)
end

#expiration(expiration) ⇒ Object 



20
21
22
23
 
# File 'lib/reflect/token.rb', line 20

def expiration(expiration)
  @expiration = expiration.to_i
  self
end

#set_attribute(name, value) ⇒ Object 



35
36
37
38
 
# File 'lib/reflect/token.rb', line 35

def set_attribute(name, value)
  @attributes[name] = value
  self
end