nubank_sdk 0.2.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f097d1d4da02660155bd767854ef6202e5622821e0eda6b9804b5d1cbf33d07
-  data.tar.gz: 4b3844c8054f98f3cc10e6eb881021146ac0b59efd998bbd47282455f035cb62
+  metadata.gz: b37684fbfd690e5b972c3626514ef706766af1279c9c1f4049310f94f31e90b9
+  data.tar.gz: 6052b2f3a8cc2d879960414d415898b9c5bbc6eb66a7aafad7003788d38696f7
 SHA512:
-  metadata.gz: 5baf7e493f3e48bff114f053c918309f86d57d5af72288322cc88a698f886e36151487c80ad986b3727acde28e0a9c66f8116bdeaed639f5f2ec16a6c2d6abbe
-  data.tar.gz: 3f58b9e0caa25fa36e14687c0ef50a7dee002930d73f729a73efb2d85a2c839d8aea51ab525ca2ae2cbe6ac577685fd711cc5dbc05b3a39f261876e59014bcea
+  metadata.gz: e659147f1a8eb81e4442a4268c915e3391e337e44a81a59c7faecbcf4e9eaaf0de4e1abc2650de1e91aa5226d680b58b5b19b277e13b2bbc0fd3999076dcdaab
+  data.tar.gz: e362fd35b8ab55e31ec48740369570b964b56990bfe51940a61ea03d5f22518bd08b8cb7fa919b6265a1dbc184271a09557352f3844b44b719ee2f12501d4b31

data/.gitignore

@@ -6,6 +6,7 @@
 /pkg/
 /spec/reports/
 /tmp/
+/certificates/*.p12
 
 # rspec failure tracking
 .rspec_status

data/.vscode/settings.json

@@ -2,9 +2,14 @@
   "cSpell.words": [
     "faraday",
     "nubank",
-    "Nubank"
+    "Nubank",
+    "pkcs"
   ],
   "conventionalCommits.scopes": [
+    "api routes",
+    "certificates",
+    "auth",
+    "client",
     "version"
   ]
 }

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    nubank_sdk (0.2.0)
+    nubank_sdk (0.4.0)
       faraday (~> 0.15.0)
       json (~> 2.1.0)
 

data/lib/nubank_sdk/api_routes.rb

@@ -51,10 +51,7 @@ module NubankSdk
     end
 
     def connection
-      @connection ||= Faraday.new(url: DISCOVERY_URI) do |faraday|
-        faraday.adapter(*@connection_adapter) if @connection_adapter
-        faraday.adapter Faraday.default_adapter unless @connection_adapter
-      end
+      @connection ||= Client::HTTP.new(DISCOVERY_URI, @connection_adapter)
     end
   end
 end

data/lib/nubank_sdk/auth.rb

@@ -0,0 +1,135 @@
+# frozen_string_literal: true
+
+module NubankSdk
+  class Auth
+    attr_reader :refresh_token, :refresh_before, :access_token
+
+    def initialize(cpf:, device_id:, key: nil, api_routes: nil, adapter: nil)
+      @cpf = cpf
+      @device_id = device_id
+      @key = key || generate_key
+      @api_routes = api_routes || NubankSdk::ApiRoutes.new
+
+      @adapter = adapter
+    end
+
+    def certificate
+      @certificate ||= NubankSdk::Certificate.new(@cpf, @key)
+    end
+
+    def authenticate_with_certificate(password)
+      token_url = @api_routes.entrypoint(path: :app, entrypoint: :token)
+      response = ssl_connection.post(token_url, token_payload(password))
+
+      response_hash = Client.get_body(response)
+
+      @refresh_token = response_hash[:refresh_token]
+      @refresh_before = response_hash[:refresh_before]
+      @access_token = response_hash[:access_token]
+
+      update_api_routes(response_hash[:_links])
+    end
+
+    def request_email_code(password)
+      response = default_connection.post(@gen_certificate_path, payload(password))
+
+      response_parsed = parse_authenticate_headers(response.headers['WWW-Authenticate'])
+      @encrypted_code = response_parsed[:device_authorization_encrypted_code]
+
+      response_parsed[:sent_to]
+    end
+
+    def exchange_certs(email_code, password)
+      response = default_connection.post(@gen_certificate_path, payload(password).merge({
+          code: email_code,
+          'encrypted-code': @encrypted_code
+        })
+      )
+
+      response_data = Client.get_body(response)
+      certificate.process_decoded response_data[:certificate]
+    end
+
+    private
+
+    def parse_authenticate_headers(header_content)
+      chunks = header_content.split(',')
+      parsed = {}
+
+      chunks.each do |chunk|
+          key, value = chunk.split('=')
+          key = key.strip().gsub(' ', '_').gsub('-', '_').to_sym
+          value = value.gsub('"', '')
+          parsed[key] = value
+      end
+    
+      parsed
+    end
+
+    def payload(password)
+      {
+        login: @cpf,
+        password: password,
+        public_key: @key.public_key.to_pem,
+        device_id: @device_id,
+        model: "NubankSdk Client (#@device_id)",
+      }
+    end
+
+    def token_payload(password)
+      {
+        'grant_type': 'password',
+        'client_id': 'legacy_client_id',
+        'client_secret': 'legacy_client_secret',
+        'login': @cpf,
+        'password': password
+      }
+    end
+
+    def generate_key
+      OpenSSL::PKey::RSA.new 2048
+    end
+
+    def update_api_routes(links)
+      feed_url_keys = ['events', 'magnitude']
+      bills_url_keys = ['bills_summary']
+      customer_url_keys = ['customer']
+      account_url_keys = ['account']
+
+      @api_routes.add_entrypoint(:ssl, :revoke_token, links[:revoke_token][:href])
+      @api_routes.add_entrypoint(:ssl, :query, links[:ghostflame][:href])
+      @api_routes.add_entrypoint(:ssl, :feed, find_url(feed_url_keys, links))
+      @api_routes.add_entrypoint(:ssl, :bills, find_url(bills_url_keys, links))
+      @api_routes.add_entrypoint(:ssl, :customer, find_url(customer_url_keys, links))
+      @api_routes.add_entrypoint(:ssl, :account, find_url(account_url_keys, links))
+      @api_routes
+    end
+
+    def find_url(keys, list)
+      links_keys = list.keys
+
+      keys.each do |key|
+        return list[key]['href'] if links_keys.include?(key)
+      end
+      ''
+    end
+
+    def prepare_connections
+      uri, @gen_certificate_path = @api_routes.entrypoint(
+        path: :app,
+        entrypoint: :gen_certificate,
+        type: :splitted
+      )
+
+      Client::HTTP.new(uri, @adapter)
+    end
+
+    def default_connection
+      @default_connection ||= prepare_connections
+    end
+
+    def ssl_connection
+      @ssl_connection ||= Client::HTTPS.new(certificate.encoded, @adapter)
+    end
+  end
+end

data/lib/nubank_sdk/certificate.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require 'openssl'
+
+module NubankSdk
+  class Certificate
+    FILES_PATH = './certificates/'
+
+    def initialize(cpf, key)
+      @cpf = cpf
+      @key = key
+    end
+
+    def process_decoded(certificate)
+      encoded = encode certificate
+
+      p12 = create_pkcs12_from encoded
+      save p12
+    end
+
+    def encoded
+      @encoded ||= OpenSSL::PKCS12.new(file.read, 'password')
+    end
+
+    private
+
+    def file
+      File.open("#{FILES_PATH}#{@cpf}.p12", 'rb')
+    end
+
+    def save(p12)
+      File.open("#{FILES_PATH}#{@cpf}.p12", 'wb') do |file|
+        file.write p12.to_der
+      end
+    end
+
+    def create_pkcs12_from(certificate)
+      OpenSSL::PKCS12.create("password", "key", @key, certificate)
+    end
+
+    def encode(certificate)
+      OpenSSL::X509::Certificate.new certificate
+    end
+  end
+end

data/lib/nubank_sdk/client.rb

@@ -1,11 +1,51 @@
 # frozen_string_literal: true
 
+require 'faraday'
 require 'json'
 
 module NubankSdk
-  class Client
+  module Client
     def self.get_body(response)
       JSON.parse(response.body, symbolize_names: true)
     end
+
+    class HTTP
+      def initialize(base_url, adapter = nil)
+        @connection = Faraday.new(url: base_url) do |faraday|
+          faraday.adapter *adapter if adapter
+          faraday.adapter Faraday.default_adapter unless adapter
+        end
+      end
+
+      def post(path, body)
+        @connection.post(path) do |req|
+          req.headers['Content-Type'] = 'application/json'
+          req.body = body.to_json
+        end
+      end
+
+      def get(path)
+        @connection.get(path)
+      end
+    end
+
+    class HTTPS
+      def initialize(certificate, adapter = nil)
+        client_cert = OpenSSL::X509::Certificate.new(certificate.certificate),
+        client_key = OpenSSL::PKey::RSA.new(certificate.key)
+
+        @connection = Faraday.new(ssl: { client_cert: client_cert, client_key: client_key}) do |faraday|
+          faraday.adapter *adapter if adapter
+          faraday.adapter Faraday.default_adapter unless adapter
+        end
+      end
+
+      def post(url, body)
+        @connection.post(url) do |req|
+          req.headers['Content-Type'] = 'application/json'
+          req.body = body.to_json
+        end
+      end
+    end
   end
 end

data/lib/nubank_sdk/version.rb

@@ -1,3 +1,3 @@
 module NubankSdk
-  VERSION = "0.2.0"
+  VERSION = "0.4.0"
 end

data/lib/nubank_sdk.rb

@@ -1,4 +1,7 @@
 require "nubank_sdk/api_routes"
+require "nubank_sdk/auth"
+require "nubank_sdk/certificate"
+require "nubank_sdk/client"
 require "nubank_sdk/version"
 
 module NubankSdk

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nubank_sdk
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Viserion77
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-10-22 00:00:00.000000000 Z
+date: 2022-10-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -98,8 +98,11 @@ files:
 - Rakefile
 - bin/console
 - bin/setup
+- certificates/.gitkeep
 - lib/nubank_sdk.rb
 - lib/nubank_sdk/api_routes.rb
+- lib/nubank_sdk/auth.rb
+- lib/nubank_sdk/certificate.rb
 - lib/nubank_sdk/client.rb
 - lib/nubank_sdk/version.rb
 - nubank_sdk.gemspec