widgit_accounts_sdk 0.0.6 → 0.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e86d598f05cce8432a51cfcbe65cb94c8778c47cd64105fb0e4d31447fbaf9f5
-  data.tar.gz: c3d709020421e239a22e157a3a3dd1e382ad27ac78b74d49bf5fa89c15c7edbd
+  metadata.gz: 7c55743e80bab6e1a33ac5ddd8bba686d00ce44f4a2322bf32603bf0a2f3d93b
+  data.tar.gz: f4ae9bfab8e4fc08bdf6a4a9d68e8ed1486390860433f0c01820b5c4f9a6cf34
 SHA512:
-  metadata.gz: 03db3def928738a18e1f0690a1673a3bd19a8bb9160a5449986ff65cbdb17590e609c7fde5b657bc7276fb51adda7740b16cca37a31357742133a2da9a5597e1
-  data.tar.gz: 203f35427c3ad47ddac74e1ff34077c3a1195a7316406d500d95898015520c244268c9f2522c2dec300787ee6636a94a3ee6bec2629b5918e8f81bca4a309701
+  metadata.gz: 4af367fbf76278d2a46b20ee2b8d0284f234217fd03010eee4e97d17d4141dbb6e79ed26c65b0dfe35f30f1a6ba4a22c21f294f4b716afb9768e85ac7ca45898
+  data.tar.gz: 750e4532950ca2d82d0ca3702df03cbc1f8109e51cdd2222ef2c0491d3223d5a5437c9b120c53d096c74672ae445d3ac1fd5c21e341f1c6dd5f9711c02752352

data/lib/widgit_accounts_sdk/client.rb

@@ -1,5 +1,6 @@
 require 'uri'
 require 'net/http'
+require 'jwt'
 
 module WidgitAccountsSdk
   module Client
@@ -64,6 +65,64 @@ module WidgitAccountsSdk
       return response
     end
 
+    def valid_access_token?(token)
+      begin
+        JWT.decode(
+          token,
+          nil,
+          true,
+          { algorithms: ['RS256'], jwks: method(:jwks_set) }
+        )
+        true
+      rescue JWT::ExpiredSignature
+        :expired
+      rescue JWT::JWKError
+        :jwk_error
+      rescue JWT::DecodeError => e
+        :error
+      end
+    end
+
+    def access_token_payload(token)
+      begin
+        payload, _ = JWT.decode(
+          token,
+          nil,
+          true,
+          { algorithms: ['RS256'], jwks: method(:jwks_set) }
+        )
+        { valid: true, payload: payload.symbolize_keys }
+      rescue JWT::ExpiredSignature
+        { valid: false, error: :expired }
+      rescue JWT::JWKError
+        { valid: false, error: :jwk_error }
+      rescue JWT::DecodeError => e
+        { valid: false, error: :error }
+      end
+    end
+
+    def refresh_access_token(refresh_token)
+      refresh_response = request("/oauth/token", :post, {
+        grant_type: 'refresh_token',
+        refresh_token: refresh_token,
+        redirect_uri: WidgitAccountsSdk.configuration.redirect_uri,
+        client_id: WidgitAccountsSdk.configuration.client_id,
+        client_secret: WidgitAccountsSdk.configuration.client_secret
+      })
+
+      if refresh_response["error"].present?
+        { error: refresh_response["error"] }
+      else
+        {
+          access_token: refresh_response["access_token"],
+          refresh_token: refresh_response["refresh_token"],
+          id_token: refresh_response["id_token"],
+          expires_in: refresh_response["expires_in"],
+          created_at: refresh_response["created_at"]
+        }
+      end
+    end
+
     private
     def request(path, method = :get, params = {})
       uri = URI.parse("#{WidgitAccountsSdk.configuration.host}#{path}")
@@ -101,5 +160,18 @@ module WidgitAccountsSdk
     def success
       { 'status' => 'success', 'code' => 200 }
     end
+
+    def jwks_set(options = {})
+      if options[:kid_not_found] && @cache_last_update < Time.now.to_i - 300
+        logger.info("Invalidating JWK cache. #{options[:kid]} not found from previous cache")
+        @cached_keys = nil
+      end
+
+      @cached_keys ||= begin
+                         @cache_last_update = Time.now.to_i
+                         jwks_hash = request('/oauth/discovery/keys')
+                         JWT::JWK::Set.new(jwks_hash)
+                       end
+    end
   end
 end

data/lib/widgit_accounts_sdk/configuration.rb

@@ -3,11 +3,17 @@ module WidgitAccountsSdk
     attr_accessor :host
     attr_accessor :api_key
     attr_accessor :watch_webhook_url
+    attr_accessor :redirect_uri
+    attr_accessor :client_id
+    attr_accessor :client_secret
 
     def initialize
       @api_key = nil
       @host = nil
       @watch_webhook_url
+      @redirect_uri = nil
+      @client_id = nil
+      @client_secret = nil
     end
   end
 end

metadata

@@ -1,16 +1,30 @@
 --- !ruby/object:Gem::Specification
 name: widgit_accounts_sdk
 version: !ruby/object:Gem::Version
-  version: 0.0.6
+  version: 0.0.7
 platform: ruby
 authors:
 - Stu Wright
 - James Sherriff
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-11-16 00:00:00.000000000 Z
-dependencies: []
+date: 2025-09-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.2
 description: A Ruby client for interacting with the Widgit Accounts API
 email: james.sherriff@widgit.com
 executables: []
@@ -20,10 +34,10 @@ files:
 - lib/widgit_accounts_sdk.rb
 - lib/widgit_accounts_sdk/client.rb
 - lib/widgit_accounts_sdk/configuration.rb
-homepage: 
+homepage:
 licenses: []
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -38,8 +52,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
-signing_key: 
+rubygems_version: 3.4.1
+signing_key:
 specification_version: 4
 summary: Widgit Accounts API Client Ruby Gem
 test_files: []