Merge pull request #10 from merefield/api_authentication

Api authentication

jobs/refresh_api_access_token.rb

@@ -0,0 +1,7 @@
+module Jobs
+  class RefreshAPIAccessToken < Jobs::Base
+    def execute(args)
+      CustomWizard::Authorization.refresh_access_token
+    end
+  end
+end

lib/authorization.rb

@@ -0,0 +1,165 @@
+require 'excon'
+
+class CustomWizard::Authorization
+
+  BASIC_AUTH = 'basic_authentication'
+  OAUTH2_AUTH  = 'OAuth2_authentication'
+
+  def self.authentication_protocol(service)
+    PluginStore.get(service, 'authentication_protocol') || {}
+  end
+
+  def self.set_authentication_protocol(service, protocol)
+    raise Discourse::InvalidParameters.new(:protocol) unless [BASIC_AUTH, OAUTH2_AUTH].include? protocol
+      PluginStore.set(service, 'authentication_protocol', protocol)
+  end
+
+  def self.access_token(service)
+    PluginStore.get(service, 'access_token') || {}
+  end
+
+  def self.set_access_token(service, data)
+    PluginStore.set(service, 'access_token', data)
+  end
+
+  def self.refresh_token (service)
+    PluginStore.get(service, 'refresh_token')
+  end
+
+  def self.set_refresh_token(service, token)
+    PluginStore.set(service, 'refresh_token', token)
+  end
+
+  def self.code(service)
+    PluginStore.get(service,'code')
+  end
+
+  def self.set_code(service, code)
+    PluginStore.set(service, 'code', code)
+  end
+
+  def self.username(service)
+    PluginStore.get(service,'username')
+  end
+
+  def self.set_username(service, username)
+    PluginStore.set(service, 'username', username)
+  end
+
+  def self.password(service)
+    PluginStore.get(service,'password')
+  end
+
+  def self.set_password(service, password)
+    PluginStore.set(service, 'password', password)
+  end
+
+  def self.client_id(service)
+    PluginStore.get(service,'client_id')
+  end
+
+  def self.set_client_id(service, client_id)
+    PluginStore.set(service, 'client_id', client_id)
+  end
+
+  def self.client_secret(service)
+    PluginStore.get(service,'client_secret')
+  end
+
+  def self.set_client_secret(service, client_secret)
+    PluginStore.set(service, 'client_secret', client_secret)
+  end
+
+  def self.url(service)
+    PluginStore.get(service,'url')
+  end
+
+  def self.set_url(service, url)
+    PluginStore.set(service, 'url', url)
+  end
+
+  def self.get_header_authorization_string(service)
+    protocol = authentication_protocol(service)
+    raise Discourse::InvalidParameters.new(:service) unless protocol.present?
+    raise Discourse::InvalidParameters.new(:protocol) unless [BASIC_AUTH, OAUTH2_AUTH].include? protocol
+
+    if protocol = BASIC_AUTH
+      username = username(service)
+      raise Discourse::InvalidParameters.new(:username) unless username.present?
+      password = password(service)
+      raise Discourse::InvalidParameters.new(:password) unless password.present?
+      authorization_string = (username + ":" + password).chomp
+      "Basic #{Base64.strict_encode64(authorization_string)}"
+    else
+      # must be OAUTH2
+      access_token = access_token(service)
+      raise Discourse::InvalidParameters.new(access_token) unless access_token.present?
+      "Bearer #{access_token}"
+    end
+  end
+
+  def self.get_access_token(service)
+    body = {
+      client_id: CustomWizard::Authorization.client_id(service),
+      client_secret: CustomWizard::Authorization.client_secret(service),
+      code: CustomWizard::Authorization.code(service),
+      grant_type: 'authorization_code',
+      redirect_uri: (Rails.env.development? ? CustomWizard::NGROK_URL : Discourse.base_url) + '/custom_wizard/authorization/callback'
+    }
+
+    result = Excon.post(
+      CustomWizard::Authorization.url(service),
+      :headers => {
+        "Content-Type" => "application/x-www-form-urlencoded"
+      },
+      :body => URI.encode_www_form(body)
+    )
+
+    self.handle_token_result(service, result)
+  end
+
+  def self.refresh_access_token(service)
+    body = {
+      grant_type: 'refresh_token',
+      refresh_token: CustomWizard::Authorization.refresh_token
+    }
+
+    authorization_string = CustomWizard::Authorization.client_id(service) + ':' + CustomWizard::Authorization.client_secret(service)
+
+    result = Excon.post(
+      CustomWizard::Authorization.url(service),
+      :headers => {
+        "Content-Type" => "application/x-www-form-urlencoded",
+        "Authorization" => "Basic #{Base64.strict_encode64(authorization_string)}"
+      },
+      :body => URI.encode_www_form(body)
+    )
+
+    self.handle_token_result(service, result)
+  end
+
+  def self.handle_token_result(service, result)
+    data = JSON.parse(result.body)
+    return false if (data['error'])
+
+    token = data['access_token']
+    expires_at = Time.now + data['expires_in'].seconds
+    refresh_at = expires_at.to_time - 2.hours
+
+    Jobs.enqueue_at(refresh_at, :refresh_api_access_token)
+
+    CustomWizard::Authorization.set_access_token(
+      service: service,
+      token: token,
+      expires_at: expires_at,
+      refresh_at: refresh_at
+    )
+
+    CustomWizard::Authorization.set_refresh_token(service, data['refresh_token'])
+  end
+
+  def self.authorized(service)
+    CustomWizard::Authorization.access_token[service, :token] &&
+    CustomWizard::Authorization.access_token[service, :expires_at].to_datetime > Time.now
+  end
+end

plugin.rb

@@ -77,6 +77,7 @@ after_initialize do
   load File.expand_path('../lib/template.rb', __FILE__)
   load File.expand_path('../lib/wizard.rb', __FILE__)
   load File.expand_path('../lib/wizard_edits.rb', __FILE__)
+  load File.expand_path('../lib/authorization.rb', __FILE__)
   load File.expand_path('../controllers/wizard.rb', __FILE__)
   load File.expand_path('../controllers/steps.rb', __FILE__)
   load File.expand_path('../controllers/admin.rb', __FILE__)