oauth-tool 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 9886d33c495d6518949769d978c9473d7d7daeb2967064628011677934c6f048
+  data.tar.gz: a4583d59e5ee705f2a3ada3c3d1401cf35f3c253d4d14f8e72bbdcd5bae1f086
+SHA512:
+  metadata.gz: 7e494e7eed47442de0d76acd43d89a54ad08f8696843b0e6fbe767bdcff5eb4f345b76c1ac1580e1a6c3bde2224c4b4d5a7de6e2d4d64f44f4bf73e34dafea82
+  data.tar.gz: 4718488f6debce1e33df8593c857af29a90fe6278d6798173fd562076bff0714b73af181eabd9c6b20c9d025a980c6b791a52ac0b198aad6ff6d94e0f5eb064f

data/bin/oauth-tool

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+
+require_relative "../lib/oauth_tool"

data/lib/oauth_tool.rb

@@ -0,0 +1,295 @@
+#!/usr/bin/env ruby
+
+require "net/http"
+require "uri"
+require "json"
+require "fileutils"
+
+BASE = "https://probable-octo-winner.fly.dev"
+TOKEN_FILE = File.join(Dir.home, ".oauth_access_token")
+VERSION = "1.0.0"
+
+def request(method, path, body = nil, token = nil)
+  uri = URI("#{BASE}#{path}")
+
+  http = Net::HTTP.new(uri.host, uri.port)
+  http.use_ssl = true
+
+  klass = {
+    "GET" => Net::HTTP::Get,
+    "POST" => Net::HTTP::Post
+  }[method]
+
+  raise "Unsupported HTTP method: #{method}" unless klass
+
+  req = klass.new(uri)
+  req["Content-Type"] = "application/json"
+  req["Authorization"] = "Bearer #{token}" if token
+  req.body = JSON.generate(body) if body
+
+  response = http.request(req)
+
+  begin
+    JSON.parse(response.body)
+  rescue JSON::ParserError
+    {
+      "raw" => response.body,
+      "status" => response.code.to_i
+    }
+  end
+end
+
+def save_token(token)
+  File.write(TOKEN_FILE, "#{token}\n")
+  File.chmod(0600, TOKEN_FILE)
+end
+
+def load_token
+  return nil unless File.file?(TOKEN_FILE)
+
+  token = File.read(TOKEN_FILE).strip
+  token.empty? ? nil : token
+end
+
+def help
+  puts <<~HELP
+    OAuth Tool #{VERSION}
+
+    Usage:
+      oauth-tool [command] [options]
+
+    Commands:
+      help                 Show this help
+      health               Check API health
+      auth register        Create an account
+      auth login           Start OAuth device login
+      auth status          Check authentication
+      auth logout          Remove saved token
+      auth help            Show authentication help
+      get                  Get protected RAM information
+
+    Options:
+      -h, --help           Show help
+      -v, --version        Show version
+  HELP
+end
+
+def auth_help
+  puts <<~HELP
+    OAuth authentication commands:
+
+      oauth-tool auth register
+      oauth-tool auth login
+      oauth-tool auth status
+      oauth-tool auth logout
+      oauth-tool auth help
+  HELP
+end
+
+def register
+  print "Username: "
+  username = STDIN.gets&.strip
+
+  if username.nil? || username.empty?
+    puts "Username is required."
+    return
+  end
+
+  print "Password: "
+
+  if STDIN.tty?
+    system("stty -echo")
+  end
+
+  password = STDIN.gets&.strip
+
+  if STDIN.tty?
+    system("stty echo")
+  end
+
+  puts
+
+  if password.nil? || password.empty?
+    puts "Password is required."
+    return
+  end
+
+  result = request(
+    "POST",
+    "/api/auth/register",
+    {
+      username: username,
+      password: password
+    }
+  )
+
+  puts JSON.pretty_generate(result)
+end
+
+def login
+  puts "Generating OAuth device code..."
+
+  data = request("POST", "/oauth/device/code", {})
+
+  unless data["device_code"]
+    puts JSON.pretty_generate(data)
+    return
+  end
+
+  device_code = data["device_code"]
+  user_code = data["user_code"]
+  verify_url =
+    data["verification_uri_complete"] ||
+    data["verification_uri"]
+
+  interval = (data["interval"] || 5).to_i
+
+  puts
+  puts "======================================"
+  puts " OAuth Device Authorization"
+  puts "======================================"
+  puts
+  puts "User code: #{user_code}"
+  puts
+  puts "Verification URL: #{verify_url}"
+  puts
+  puts "Open the URL and authorize the device."
+  puts "Waiting for authorization..."
+
+  loop do
+    token_data = request(
+      "POST",
+      "/oauth2/token",
+      { device_code: device_code }
+    )
+
+    if token_data["access_token"]
+      save_token(token_data["access_token"])
+
+      puts
+      puts "Authorization completed."
+      puts "Access token saved:"
+      puts TOKEN_FILE
+      return
+    end
+
+    if token_data["error"] == "authorization_pending"
+      print "."
+      sleep interval
+      next
+    end
+
+    puts
+    puts "OAuth token request failed:"
+    puts JSON.pretty_generate(token_data)
+    return
+  end
+end
+
+def status
+  token = load_token
+
+  unless token
+    puts '{"authenticated":false}'
+    return
+  end
+
+  result = request(
+    "GET",
+    "/api/oauth/status",
+    nil,
+    token
+  )
+
+  puts JSON.pretty_generate(result)
+end
+
+def logout
+  token = load_token
+
+  unless token
+    puts "Not authenticated."
+    return
+  end
+
+  result = request(
+    "POST",
+    "/api/auth/logout",
+    {},
+    token
+  )
+
+  File.delete(TOKEN_FILE) if File.exist?(TOKEN_FILE)
+
+  puts JSON.pretty_generate(result)
+  puts "Local access token removed."
+end
+
+def get_ram
+  token = load_token
+
+  unless token
+    puts "Not authenticated."
+    puts "Run: oauth-tool auth login"
+    return
+  end
+
+  result = request(
+    "GET",
+    "/api/get-ram",
+    nil,
+    token
+  )
+
+  puts JSON.pretty_generate(result)
+end
+
+args = ARGV.dup
+
+if args.empty? ||
+   args[0] == "help" ||
+   args[0] == "-h" ||
+   args[0] == "--help"
+
+  help
+  exit
+end
+
+if args[0] == "-v" || args[0] == "--version"
+  puts VERSION
+  exit
+end
+
+case args[0]
+when "health"
+  puts JSON.pretty_generate(
+    request("GET", "/api/health")
+  )
+
+when "get"
+  get_ram
+
+when "auth"
+  case args[1]
+  when "register"
+    register
+  when "login"
+    login
+  when "status"
+    status
+  when "logout"
+    logout
+  when "help", nil
+    auth_help
+  else
+    warn "Unknown auth command: #{args[1]}"
+    auth_help
+    exit 1
+  end
+
+else
+  warn "Unknown command: #{args[0]}"
+  puts
+  help
+  exit 1
+end

data/oauth-tool.gemspec

@@ -0,0 +1,21 @@
+Gem::Specification.new do |spec|
+  spec.name          = "oauth-tool"
+  spec.version       = "1.0.0"
+  spec.authors       = ["Jjjm"]
+  spec.summary       = "OAuth device authorization CLI"
+  spec.description   = "CLI for OAuth device authentication and protected API access."
+  spec.homepage      = "https://probable-octo-winner.fly.dev"
+  spec.license       = "MIT"
+
+  spec.required_ruby_version = ">= 3.0"
+
+  spec.files = [
+    "bin/oauth-tool",
+    "lib/oauth_tool.rb",
+    "oauth-tool.gemspec"
+  ]
+
+  spec.bindir        = "bin"
+  spec.executables   = ["oauth-tool"]
+  spec.require_paths = ["lib"]
+end

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: oauth-tool
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Jjjm
+bindir: bin
+cert_chain: []
+date: 2026-08-13 00:00:00.000000000 Z
+dependencies: []
+description: CLI for OAuth device authentication and protected API access.
+executables:
+- oauth-tool
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/oauth-tool
+- lib/oauth_tool.rb
+- oauth-tool.gemspec
+homepage: https://probable-octo-winner.fly.dev
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.2
+specification_version: 4
+summary: OAuth device authorization CLI
+test_files: []