hcbv4 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c035e49436c87eccf3233afebd5fd68344d444481514a5731d5fd25f6f7cb2cb
-  data.tar.gz: 0bd27f22f97e4e328ebe309bc769a3a5cdde0349435eebf51628ee436b7be4d3
+  metadata.gz: 769371ccfa3c68e1fb4e70af29889f49e19319c6c4d7152dea54ce56f462d7d4
+  data.tar.gz: 00d08d8cb7479e1004bc5a3eaacc87faad6ce1708d38f05d06c14066983fe830
 SHA512:
-  metadata.gz: ee07d48d5e0487331b6a4ad4959c4348dc82aff5f4925302a56c57f3c010c5a45d32294ebeb593d56b51f8b1925e320fe4f9b7c36fe8cdfa4d2764ecefb7e4cb
-  data.tar.gz: bef11f010e84b3b6b75ad12b39fbadc2966de34713e71295f1852e1c613f894bced5da4e62ee913ffeb60f16755760541eea24f5317a90fcd7fa1dcc1746ffd0
+  metadata.gz: 8b2df71c8f293d0988a18fdb97ac180b756e3d06e196e0314275e458255fb79fd9bbb88124544c43b3792e9c2a1345e49a9a9ea42649f1a17a250952a95cfa13
+  data.tar.gz: ed0641418b2cf847ba8396f22ca860373c3cb04d05f6110cda7f7d73348a54d9f3de54704cb7121982ed6772046e46e3f3decb247be19fb463e31b98c821f836

data/README.md

@@ -30,17 +30,27 @@ client = HCBV4::Client.from_credentials(
 )
 ```
 
-the client automatically refreshes expired tokens before each request. after any API call, you can grab the (possibly refreshed) tokens to persist them:
+the client automatically refreshes expired tokens before each request. to persist refreshed tokens, use the `on_token_refresh` callback:
 
 ```ruby
-token = client.oauth_token
-save_to_database(
-  access_token: token.token,
-  refresh_token: token.refresh_token,
-  expires_at: token.expires_at
+client = HCBV4::Client.from_credentials(
+  client_id: ENV["HCB_CLIENT_ID"],
+  client_secret: ENV["HCB_CLIENT_SECRET"],
+  access_token: user.hcb_access_token,
+  refresh_token: user.hcb_refresh_token,
+  expires_at: user.hcb_token_expires_at,
+  on_token_refresh: ->(token) {
+    user.update!(
+      hcb_access_token: token.token,
+      hcb_refresh_token: token.refresh_token,
+      hcb_token_expires_at: token.expires_at
+    )
+  }
 )
 ```
 
+the callback is invoked immediately after a token refresh, before the API request is made. this ensures your stored tokens are always up to date.
+
 ### disabling automatic token refresh
 
 if you're managing token refresh yourself, you can disable automatic refresh:
@@ -498,53 +508,6 @@ tx.update!(memo: "new memo")  # => Error: organization.id is nil
 
 ## recipes
 
-### token persistence
-
-the client automatically refreshes expired tokens. only persist when the token actually changes:
-
-```ruby
-class HCBService
-  def self.with(user, &block)
-    service = new(user)
-    block.call(service.client)
-  ensure
-    service.persist_if_refreshed!
-  end
-
-  def initialize(user)
-    @user = user
-    @original_token = user.hcb_access_token
-  end
-
-  def client
-    @client ||= HCBV4::Client.from_credentials(
-      client_id: ENV["HCB_CLIENT_ID"],
-      client_secret: ENV["HCB_CLIENT_SECRET"],
-      access_token: @user.hcb_access_token,
-      refresh_token: @user.hcb_refresh_token,
-      expires_at: @user.hcb_token_expires_at
-    )
-  end
-
-  def persist_if_refreshed!
-    return unless @client
-    token = @client.oauth_token
-    return if token.token == @original_token
-
-    @user.update!(
-      hcb_access_token: token.token,
-      hcb_refresh_token: token.refresh_token,
-      hcb_token_expires_at: token.expires_at
-    )
-  end
-end
-
-# usage:
-HCBService.with(current_user) do |client|
-  client.organizations
-end
-```
-
 ### keep your ledger pretty
 
 when a card grant is created, it generates a disbursement (transfer) from the org to the grant. you might want to label it:

data/lib/hcbv4/client.rb

@@ -9,21 +9,22 @@ module HCBV4
     DEFAULT_BASE_URL = "https://hcb.hackclub.com"
     API_PATH = "/api/v4"
 
-    attr_reader :oauth_token, :base_url, :auto_token_refresh
+    attr_reader :oauth_token, :base_url, :auto_token_refresh, :on_token_refresh
 
-    def initialize(oauth_token:, base_url: DEFAULT_BASE_URL, auto_token_refresh: true)
+    def initialize(oauth_token:, base_url: DEFAULT_BASE_URL, auto_token_refresh: true, on_token_refresh: nil)
       @oauth_token = oauth_token
       @base_url = base_url
       @auto_token_refresh = auto_token_refresh
+      @on_token_refresh = on_token_refresh
     end
 
     def self.from_credentials(client_id:, client_secret:, access_token:, refresh_token:, expires_at: nil,
-                              base_url: DEFAULT_BASE_URL, auto_token_refresh: true)
+                              base_url: DEFAULT_BASE_URL, auto_token_refresh: true, on_token_refresh: nil)
       oauth_client = OAuth2::Client.new(
         client_id,
         client_secret,
         site: base_url,
-        token_url: "/oauth/token"
+        token_url: "/api/v4/oauth/token"
       )
 
       token = OAuth2::AccessToken.new(
@@ -33,7 +34,7 @@ module HCBV4
         expires_at:
       )
 
-      new(oauth_token: token, base_url:, auto_token_refresh:)
+      new(oauth_token: token, base_url:, auto_token_refresh:, on_token_refresh:)
     end
 
     # ─────────────────────────────────────────────────────────────────────────
@@ -564,6 +565,7 @@ module HCBV4
       return unless oauth_token.expired?
 
       @oauth_token = oauth_token.refresh!
+      on_token_refresh&.call(@oauth_token)
     end
 
     def connection

data/lib/hcbv4/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module HCBV4
-  VERSION = "0.1.1"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hcbv4
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - 24c02