widgit_accounts_sdk 0.0.6 → 0.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e86d598f05cce8432a51cfcbe65cb94c8778c47cd64105fb0e4d31447fbaf9f5
-  data.tar.gz: c3d709020421e239a22e157a3a3dd1e382ad27ac78b74d49bf5fa89c15c7edbd
+  metadata.gz: 2cca68013dcd7b7be838ba5c23de0778245702eab8888660cd8a8581485773af
+  data.tar.gz: 11e8770755e0a99415186d52953d06a084d9fc3b27b504124ff988528a5f3499
 SHA512:
-  metadata.gz: 03db3def928738a18e1f0690a1673a3bd19a8bb9160a5449986ff65cbdb17590e609c7fde5b657bc7276fb51adda7740b16cca37a31357742133a2da9a5597e1
-  data.tar.gz: 203f35427c3ad47ddac74e1ff34077c3a1195a7316406d500d95898015520c244268c9f2522c2dec300787ee6636a94a3ee6bec2629b5918e8f81bca4a309701
+  metadata.gz: 876cc696d2f18c33c2a1a7391503219fc52ee19800fc257f2553c4189849c5c3df519265a56826a3c2021f2552e590146e8a723e619b5b79c62867ad41c32cdd
+  data.tar.gz: c85cfa7f0bd4809ce60fbb283692963a9be22efbd190248c7eec4a1f90c4b30f856afb1204cdbd6e69962a82045d0ddc8d98be1006217d8a98fcf7404ed12215

data/lib/widgit_accounts_sdk/client.rb

@@ -1,5 +1,6 @@
 require 'uri'
 require 'net/http'
+require 'jwt'
 
 module WidgitAccountsSdk
   module Client
@@ -29,11 +30,10 @@ module WidgitAccountsSdk
       return success.merge('exists' => response['exists'])
     end
 
-    def invite(email, first_name = nil, last_name = nil)
-      email = CGI.escape email # URL encode the string, for things like plus forwarding which get converted to spaces
-      request_url = "/api/v1/accounts/invite?#{email.to_query(:email)}"
-      request_url += "&#{first_name.to_query(:first_name)}" if first_name
-      request_url += "&#{last_name.to_query(:last_name)}" if last_name
+    def invite(email, **options)
+      params = { email: email }.merge(options.compact)
+      query  = params.to_query
+      request_url = "/api/v1/accounts/invite?#{query}"
       response = request(request_url, :post)
       return failed(response['error']) if response['status'] == 'failed'
       return response
@@ -64,6 +64,64 @@ module WidgitAccountsSdk
       return response
     end
 
+    def valid_access_token?(token)
+      begin
+        JWT.decode(
+          token,
+          nil,
+          true,
+          { algorithms: ['RS256'], jwks: method(:jwks_set) }
+        )
+        true
+      rescue JWT::ExpiredSignature
+        :expired
+      rescue JWT::JWKError
+        :jwk_error
+      rescue JWT::DecodeError => e
+        :error
+      end
+    end
+
+    def access_token_payload(token)
+      begin
+        payload, _ = JWT.decode(
+          token,
+          nil,
+          true,
+          { algorithms: ['RS256'], jwks: method(:jwks_set) }
+        )
+        { valid: true, payload: payload.symbolize_keys }
+      rescue JWT::ExpiredSignature
+        { valid: false, error: :expired }
+      rescue JWT::JWKError
+        { valid: false, error: :jwk_error }
+      rescue JWT::DecodeError => e
+        { valid: false, error: :error }
+      end
+    end
+
+    def refresh_access_token(refresh_token)
+      refresh_response = request("/oauth/token", :post, {
+        grant_type: 'refresh_token',
+        refresh_token: refresh_token,
+        redirect_uri: WidgitAccountsSdk.configuration.redirect_uri,
+        client_id: WidgitAccountsSdk.configuration.client_id,
+        client_secret: WidgitAccountsSdk.configuration.client_secret
+      })
+
+      if refresh_response["error"].present?
+        { error: refresh_response["error"] }
+      else
+        {
+          access_token: refresh_response["access_token"],
+          refresh_token: refresh_response["refresh_token"],
+          id_token: refresh_response["id_token"],
+          expires_in: refresh_response["expires_in"],
+          created_at: refresh_response["created_at"]
+        }
+      end
+    end
+
     private
     def request(path, method = :get, params = {})
       uri = URI.parse("#{WidgitAccountsSdk.configuration.host}#{path}")
@@ -101,5 +159,18 @@ module WidgitAccountsSdk
     def success
       { 'status' => 'success', 'code' => 200 }
     end
+
+    def jwks_set(options = {})
+      if options[:kid_not_found] && @cache_last_update < Time.now.to_i - 300
+        logger.info("Invalidating JWK cache. #{options[:kid]} not found from previous cache")
+        @cached_keys = nil
+      end
+
+      @cached_keys ||= begin
+                         @cache_last_update = Time.now.to_i
+                         jwks_hash = request('/oauth/discovery/keys')
+                         JWT::JWK::Set.new(jwks_hash)
+                       end
+    end
   end
 end

data/lib/widgit_accounts_sdk/configuration.rb

@@ -3,11 +3,17 @@ module WidgitAccountsSdk
     attr_accessor :host
     attr_accessor :api_key
     attr_accessor :watch_webhook_url
+    attr_accessor :redirect_uri
+    attr_accessor :client_id
+    attr_accessor :client_secret
 
     def initialize
       @api_key = nil
       @host = nil
       @watch_webhook_url
+      @redirect_uri = nil
+      @client_id = nil
+      @client_secret = nil
     end
   end
 end

metadata

@@ -1,16 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: widgit_accounts_sdk
 version: !ruby/object:Gem::Version
-  version: 0.0.6
+  version: 0.0.8
 platform: ruby
 authors:
 - Stu Wright
 - James Sherriff
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-11-16 00:00:00.000000000 Z
-dependencies: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.2
 description: A Ruby client for interacting with the Widgit Accounts API
 email: james.sherriff@widgit.com
 executables: []
@@ -20,10 +33,8 @@ files:
 - lib/widgit_accounts_sdk.rb
 - lib/widgit_accounts_sdk/client.rb
 - lib/widgit_accounts_sdk/configuration.rb
-homepage: 
 licenses: []
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -38,8 +49,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
-signing_key: 
+rubygems_version: 4.0.6
 specification_version: 4
 summary: Widgit Accounts API Client Ruby Gem
 test_files: []