class OAuth2::Strategy::Assertion
@see tools.ietf.org/html/draft-ietf-oauth-jwt-bearer-07#section-3.1
Sample usage:
client = OAuth2::Client.new(client_id, client_secret, :site => 'http://localhost:8080') params = {:hmac_secret => "some secret", # or :private_key => "private key string", :iss => "http://localhost:3001", :sub => "me@here.com", :exp => Time.now.utc.to_i + 3600} access = client.assertion.get_token(params) access.token # actual access_token string access.get("/api/stuff") # making api calls with access token in header
Public Instance Methods
build_assertion(params)
click to toggle source
# File lib/oauth2/strategy/assertion.rb, line 58 def build_assertion(params) claims = {:iss => params[:iss], :aud => params[:aud], :sub => params[:sub], :exp => params[:exp] } if params[:hmac_secret] JWT.encode(claims, params[:hmac_secret], params[:algorithm] || 'HS256') elsif params[:private_key] JWT.encode(claims, params[:private_key], params[:algorithm] || 'RS256') end end
build_request(params)
click to toggle source
# File lib/oauth2/strategy/assertion.rb, line 50 def build_request(params) assertion = build_assertion(params) {:grant_type => 'urn:ietf:params:oauth:grant-type:jwt-bearer', :assertion => assertion, :scope => params[:scope] }.merge(client_params) end
get_token(params = {}, opts = {})
click to toggle source
Retrieve an access token given the specified client.
@param [Hash] params assertion params pass either :hmac_secret or :private_key, but not both.
params :hmac_secret, secret string. params :private_key, private key string. params :iss, issuer params :aud, audience, optional params :sub, principal, current user params :exp, expired at, in seconds, like Time.now.utc.to_i + 3600
@param [Hash] opts options
# File lib/oauth2/strategy/assertion.rb, line 45 def get_token(params = {}, opts = {}) hash = build_request(params) @client.get_token(hash, opts.merge('refresh_token' => nil)) end