oauth2_token 0.1.3 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7eedf89c84a83cab6b3b86c5054a9791f4acac20
-  data.tar.gz: a605feb556d3df932bd4106881b4afdd32dc780b
+  metadata.gz: 421ec95d0448ebaba9477495d82c38271fae0c3e
+  data.tar.gz: a683c9bb9f62d1f1cd69db595c47af0728b3f4f1
 SHA512:
-  metadata.gz: f94d62db05a86715f0d52cba0a125cec36c389631a0edb6b8226fa7770a9acb4aadb793ab7f27adaf79aec740d82fd70577ee8a1f09fa10ec72a2beb3647c33f
-  data.tar.gz: 58bebcc6dd50aa475900a8478754c93a882d9b735bd2681d3f92d6cf6338ebfbf5177b07794b9b9219324ad550deea1a34a74260781a205eee6566de3f1e7400
+  metadata.gz: 9b82b103134d2e549ef3db4becfa6c275639b029e9faa4da47e9c0629ec625231faab460ec185d907a6ec84b306cb076ef112201533a323d30a2295380a4173a
+  data.tar.gz: 934478c6496b45314879e1b16bb246790ba6a2e09a560ae676307ba594ed14ba9ffb722e5499fa7470b8afec1ea4b6040b3ba8e5492d25d230c4aa6b572f6056

data/README.md

@@ -23,7 +23,7 @@ Or install it yourself as:
 __authenticate and validate__
 
     # options object 
-    opts = { "uri" => "https://id.corp.aol.com/identity", "realm" => "<your realm>", "scope" => "<comma separated list of scopes>" }
+    opts = { "uri" => "https://<oauth2 provider url>", "realm" => "<your realm>", "scope" => "<comma separated list of scopes>" }
 
     # generate a token
     token = Oauth2Token.get_token('client_id','client_secret', opts)

data/lib/oauth2_token.rb

@@ -1,5 +1,6 @@
 require "oauth2_token/version"
 require "httparty"
+require "jwt"
 
 module Oauth2Token
 
@@ -8,12 +9,13 @@ module Oauth2Token
     def get_token(client_id, client_secret, options={})
       begin
         endpoint = get_endpoint(options['uri'], "create")
+        jwt = create_jwt(client_id, client_secret, endpoint, options['realm'])
         body = {
-          "grant_type" => "client_credentials",
-          "scope" => options['scope'],
-          "realm" => options['realm'],
-          "client_id" => client_id,
-          "client_secret" => client_secret
+          "grant_type"            => "client_credentials",
+          "scope"                 => options['scope'],
+          "realm"                 => options['realm'],
+          "client_assertion_type" => "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
+          "client_assertion"      => jwt
         }
         response = wrap(HTTParty.post(endpoint, http_options.merge(:body => body)))
         response['access_token']
@@ -42,6 +44,19 @@ module Oauth2Token
 
     private
 
+    def create_jwt(client_id, client_secret, endpoint, realm)
+      iat = Time.now.to_i
+      exp = iat+600
+      payload = {
+        :iss => client_id,
+        :sub => client_id,
+        :aud => endpoint + '?realm=' + realm,
+        :iat => iat,
+        :exp => exp
+      }
+      JWT.encode payload, client_secret, 'HS256'
+    end
+
     def get_endpoint(uri, action)
       case action
         when "create"

data/lib/oauth2_token/version.rb

@@ -1,3 +1,3 @@
 module Oauth2Token
-  VERSION = "0.1.3"
+  VERSION = "0.1.4"
 end

data/oauth2_token.gemspec

@@ -31,6 +31,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "httparty"
+  spec.add_dependency "jwt"
 
   spec.add_development_dependency "bundler", "~> 1.13"
   spec.add_development_dependency "rake", "~> 10.0"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: oauth2_token
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
 platform: ruby
 authors:
 - Sandeep Malalur
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-03-03 00:00:00.000000000 Z
+date: 2017-08-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement