fidor_starter_kits 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 30fdb6f18b6e5fc63cf4c0fa3c62ae153c937b84
-  data.tar.gz: 824c624eb90dccf800c6d193d8d9258ab6f369d5
+  metadata.gz: f7ad745a98bc665f779656eafe044a2347095f7f
+  data.tar.gz: a14fdce60c3b77f7a67d39380a475a4f459b181a
 SHA512:
-  metadata.gz: 91857810606f02f9be3e5112e21e8a5420d45a9246ff47bd1fa9e2d0ae2455d07d9fa08894e230af79e892bdb3f0c36a21ccc1c70120f02f7f8a9f54288800e2
-  data.tar.gz: d349653302eb2728b4c867f2458b26f381cb748d8cc7e8eb0bfe747e91a594bfdb893f74e6c510b60d33d60efd153a4289f701164f0c6a90a735f7f6f85201b4
+  metadata.gz: da247667b132890f3805783948690d7a5cdab9880b01cb8b279fbf8399b83337fe63c80736221a7eaad6d643bc909da7dd26c514687e79b391120a5a9da67210
+  data.tar.gz: 7c734c748e1a6c24d9facd4faadba4935cf9307859509faf3506d58954ff57698a9e2fe29d180e9143906269a44f5b624e7d727f5c1c1fd5bc559f4971269c51

data/CHANGELOG.md

@@ -1,6 +1,10 @@
 # Changelog Fidor Admin API Schema
 See [commit messages](https://github.com/fidor/fidor_starter_kits/commits/) for details.
 
+##2016-01
+
+* remove client_secret usage in params => moved to BasicAuth header
+
 ##2015-06
 
 * fix usage of access_token in api URLs, now set in Authorization Header

data/lib/fidor_starter_kits/version.rb

@@ -1,3 +1,3 @@
 module FidorStarterKits
-  VERSION = '0.4.0'
+  VERSION = '0.5.0'
 end

data/starter_kits/golang_transactions/example.go

@@ -212,7 +212,6 @@ func retrieveTokenFromCode(code string, target_endpoint string) (token string, e
 	redirect_uri := fmt.Sprintf("%s/oauth?ep=%s", fidorConfig.AppUrl, target_endpoint)
 	tokenPayload := url.Values{
 		"client_id": {fidorConfig.ClientId},
-		//"client_secret": {fidorConfig.ClientSecret},
 		"code":         {code},
 		"redirect_uri": {url.QueryEscape(redirect_uri)},
 		"grant_type":   {"authorization_code"},

data/starter_kits/node_tx/example.js

@@ -86,7 +86,6 @@ function retrieve_access_token_from_code( code, target_endpoint, cb ) {
   var postData = {
     code          : code,
     client_id     : fidor_config.client_id,
-    // client_secret : fidor_config.client_secret, // deprecated, please use basic auth, see. postOptions, above
     redirect_uri  : encodeURIComponent(redirect_uri),
     grant_type    : "authorization_code"
   }

data/starter_kits/php_oauth_plain/example.php

@@ -6,31 +6,35 @@ $app_secret     = "<CLIENT_SECRET>";
 $fidor_oauth_url= "<FIDOR_OAUTH_URL>";   # e.g Sandbox: https://aps.fidor.de/oauth / Live: https://apm.fidor.de/oauth
 $fidor_api_url  = "<FIDOR_API_URL>";     # e.g Sandbox: https://aps.fidor.de / Live: https://api.fidor.de
 
-
 $code = $_REQUEST["code"];
 
   # 1. redirect to authorize url
-  if(empty($code)) {
-    $dialog_url = $fidor_oauth_url . "/authorize?" .
-                  "client_id=". $app_id .
-                  "&redirect_uri=" . urlencode($app_url) .
-                  "&state=1234&response_type=code";
-
-    echo("<script> top.location.href='" . $dialog_url . "'</script>");
-  }
+if(empty($code) || $code == '') {
+  $dialog_url = $fidor_oauth_url . "/authorize?" .
+                "client_id=". $app_id .
+                "&redirect_uri=" . urlencode($app_url) .
+                "&state=1234&response_type=code";
+
+  echo("<script> top.location.href='" . $dialog_url . "'</script>");
+}else{
   # 2. build url to get the access token
   $token_url = $fidor_oauth_url . "/token";
 
   $data = array('client_id' => $app_id,
-                'client_secret' => $app_secret,
+              //'client_secret' => $app_secret, deprecated use safe Basic Auth header instead
                 'code' => $code,
                 'redirect_uri' => urlencode($app_url),
                 'grant_type' => 'authorization_code'
                 );
+  //Authorization Header with the value "Basic " + base64encode(username + ":" + password)
+  $basic_auth = base64_encode($app_id.":".$app_secret );
+  // build header
+  $headers = "Content-type: application/x-www-form-urlencoded\r\n" .
+             "Authorization: Basic ".$basic_auth."\r\n";
   // use key 'http' even if you send the request to https://...
   $options = array(
       'http' => array(
-          'header'  => "Content-type: application/x-www-form-urlencoded\r\n",
+          'header'  => $headers,
           'method'  => 'POST',
           'content' => http_build_query($data),
       ),
@@ -47,5 +51,5 @@ $code = $_REQUEST["code"];
         <p>Now use the access token in the request header in your favorite PHP HTTP method or via CURL: </p>
         <blockquote>curl -v -H \"Authorization: Bearer ".$resp->access_token."\" -H \"Accept: application/vnd.fidor.de; version=1,text/json\" ".$fidor_api_url."/transactions
         </blockquote>");
-
+}
 ?>

data/starter_kits/ruby_oauth_plain/example.rb

@@ -21,7 +21,6 @@ get '/' do
   post_params = { client_id: @client_id,
                   redirect_uri: CGI::escape(@app_url),
                   code: code,
-                  #client_secret: @client_secret,
                   grant_type: 'authorization_code' }
   auth = {:username => @client_id, :password => @client_secret}
   resp = HTTParty.post(token_url, body: post_params, basic_auth: auth )

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fidor_starter_kits
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Georg Leciejewski
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-06 00:00:00.000000000 Z
+date: 2016-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubyzip