account_kit 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 251a8969035dbfb38021a1eece9c1d3a98f2cf19
-  data.tar.gz: cd2296c7f5aeac9da93f4524b8eb609994d340c0
+  metadata.gz: fd48f80314796341e8eec70fc0f1c61534eba109
+  data.tar.gz: f3c8cbeb479c9014b7c82d232f4516dacb4c34f7
 SHA512:
-  metadata.gz: 96c3234a5b82c318f7f30f4f1dad91d45808bcb56b887c0d38b5b3aa44a2dee9af67b837334abea9b9c61889655cdaaf51dd736924b2046b02c6a094d6567f4e
-  data.tar.gz: 3a5b2dcc476eb64b6c1f6b7f92313b1916b86dbb84a2f698c9124b958a018752d7a0f55ee97584d3bf347e9bcda754e7276fe4ebc03e3ff7b981604679b9c22e
+  metadata.gz: 9e0273d545b1c87c29910e19821173cf4c93b6dd039ba4e6e52ee00c751757c696e84b6a0ebce1e7b12ec993b85136413f0cdf3a2a9041d3c012953ef5d0a4dc
+  data.tar.gz: 3b798c56af915ee70c5343c73c2687c3babfb81ffb530d015b61b80fb6541f5cc6f23cab0d86f4124267a9a1a04d9fe69688d50b523fb0c58dd68d2bf7be0cb2

data/README.md

@@ -2,7 +2,8 @@
 
 # AccountKit
 A light-weight Ruby API client for [Facebook Account Kit](https://developers.facebook.com/docs/accountkit) with no dependency.
-A demo of the Account Kit can be found [here](https://www.facebook.com/FacebookforDevelopers/videos/10153620979588553/).
+A video demo of the Account Kit can be found [here](https://www.facebook.com/FacebookforDevelopers/videos/10153620979588553/).
+You can find a demo app [here](https://github.com/vnnoder/account_kit_demo)
 
 ## Installation
 
@@ -34,6 +35,12 @@ AccountKit.configure do |config|
 end
 ```
 
+AccountKit support App Secret Proof, if you turn on "Require App Secret", add the following config:
+
+```
+config.require_app_secret = true
+```
+
 ### API
 
 If you turn off Enable Client Access Token Flow and use [Authorization Code Flow](https://developers.facebook.com/docs/accountkit/accesstokens), you need to provide the authorization code after user authenticate with Account Kit in order to get an access token:
@@ -47,8 +54,7 @@ If you turn on Enable Client Access Token Flow, you should already have an acces
 ```
 response     = JSON.parse(AccountKit.me(access_token).body)
 email        = response[:email][:address]
-phone_code   = response[:phone][:country_prefix]
-phone_number = response[:phone][:national_number]
+phone_number = response[:phone][:number]
 ```
 
 ## Development

data/lib/account_kit.rb

@@ -1,14 +1,13 @@
 require 'net/http'
 require 'json'
+require 'openssl'
 
 require 'account_kit/version'
 require 'account_kit/base'
 require 'account_kit/config'
 
-module AccountKit
-  extend self
-
-  def configure
+class AccountKit
+  def self.configure
     yield Config
   end
 end

data/lib/account_kit/base.rb

@@ -1,9 +1,22 @@
-module AccountKit
-  extend self
+class AccountKit
 
   GRANT_TYPE = 'authorization_code'.freeze
   DEFAULT_VERSION = 'v1.0'
 
+  class << self
+    # Support older versions
+    def method_missing(name, *args, &block)
+      new.send(name, *args, &block)
+    end
+  end
+
+  def initialize(options = {})
+    @app_id = options.fetch(:app_id, Config.app_id)
+    @app_secret = options.fetch(:app_secret, Config.app_secret)
+    @api_version = options.fetch(:api_version, Config.api_version || DEFAULT_VERSION)
+    @require_app_secret = options.fetch(:require_app_secret, Config.require_app_secret)
+  end
+
   def access_token(code)
     uri = build_access_token_uri(code)
     send_payload(uri)
@@ -34,10 +47,21 @@ module AccountKit
 
   def build_me_uri(access_token)
     uri = URI(me_url)
-    uri.query = URI.encode_www_form(access_token: access_token)
+    uri.query = URI.encode_www_form(me_params(access_token))
     uri
   end
 
+  def me_params(access_token)
+    params = { access_token: access_token }
+    params[:appsecret_proof] = appsecret_proof(access_token) if @require_app_secret
+    params
+  end
+
+  def appsecret_proof(access_token)
+    sha256 = OpenSSL::Digest::SHA256.new
+    OpenSSL::HMAC.hexdigest(sha256, @app_secret, access_token)
+  end
+
   def access_token_params(code)
     {
       grant_type: GRANT_TYPE,
@@ -47,18 +71,14 @@ module AccountKit
   end
 
   def access_token_url
-    "https://graph.accountkit.com/#{api_version}/access_token"
+    "https://graph.accountkit.com/#{@api_version}/access_token"
   end
 
   def me_url
-    "https://graph.accountkit.com/#{api_version}/me"
+    "https://graph.accountkit.com/#{@api_version}/me"
   end
 
   def app_access_token
-    ['AA', Config.app_id, Config.app_secret].join('|')
-  end
-
-  def api_version
-    Config.api_version || DEFAULT_VERSION
+    ['AA', @app_id, @app_secret].join('|')
   end
 end

data/lib/account_kit/config.rb

@@ -1,9 +1,10 @@
-module AccountKit
+class AccountKit
   module Config
     extend self
 
     attr_accessor :app_id
     attr_accessor :app_secret
     attr_accessor :api_version
+    attr_accessor :require_app_secret
   end
 end

data/lib/account_kit/version.rb

@@ -1,3 +1,3 @@
-module AccountKit
-  VERSION = "0.1.2"
+class AccountKit
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: account_kit
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Duc Le
@@ -11,7 +11,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-04-17 00:00:00.000000000 Z
+date: 2016-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -99,8 +99,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: A light-weight Ruby API client for Facebook Account Kit with no dependency.
 test_files: []
+has_rdoc: