Chuck Driesler
89 lines
1.9 KiB
TypeScript
89 lines
1.9 KiB
TypeScript
/* eslint-disable camelcase */
|
|
|
|
import crypto from 'crypto'
|
|
import { z } from 'zod'
|
|
|
|
interface BuildAuthorizeUrlOptions {
|
|
clientId: string
|
|
redirectUri: string
|
|
codeChallenge: string
|
|
scopes: string[]
|
|
}
|
|
|
|
interface ExchangeCodeOptions {
|
|
code: string
|
|
codeVerifier: string
|
|
clientId: string
|
|
clientSecret: string
|
|
redirectUri: string
|
|
}
|
|
|
|
const AccTokens = z.object({
|
|
access_token: z.string(),
|
|
refresh_token: z.string(),
|
|
token_type: z.string(),
|
|
id_token: z.string(),
|
|
expires_in: z.number()
|
|
})
|
|
|
|
export type AccTokens = z.infer<typeof AccTokens>
|
|
|
|
export const generateCodeVerifier = () => {
|
|
const codeVerifier = crypto.randomBytes(32).toString('base64url')
|
|
const codeChallenge = crypto
|
|
.createHash('sha256')
|
|
.update(codeVerifier)
|
|
.digest('base64url')
|
|
return { codeVerifier, codeChallenge }
|
|
}
|
|
|
|
export const buildAuthorizeUrl = ({
|
|
clientId,
|
|
redirectUri,
|
|
codeChallenge,
|
|
scopes
|
|
}: BuildAuthorizeUrlOptions) => {
|
|
const params = new URLSearchParams({
|
|
response_type: 'code',
|
|
client_id: clientId,
|
|
redirect_uri: redirectUri,
|
|
scope: scopes.join(' '),
|
|
code_challenge: codeChallenge,
|
|
code_challenge_method: 'S256'
|
|
})
|
|
|
|
return `https://developer.api.autodesk.com/authentication/v2/authorize?${params.toString()}`
|
|
}
|
|
|
|
export const exchangeCodeForTokens = async ({
|
|
code,
|
|
codeVerifier,
|
|
clientId,
|
|
clientSecret,
|
|
redirectUri
|
|
}: ExchangeCodeOptions): Promise<AccTokens> => {
|
|
const params = new URLSearchParams({
|
|
grant_type: 'authorization_code',
|
|
client_id: clientId,
|
|
client_secret: clientSecret,
|
|
redirect_uri: redirectUri,
|
|
code,
|
|
code_verifier: codeVerifier
|
|
})
|
|
|
|
const response = await fetch(
|
|
'https://developer.api.autodesk.com/authentication/v2/token',
|
|
{
|
|
method: 'POST',
|
|
body: params,
|
|
headers: {
|
|
'Content-Type': 'application/x-www-form-urlencoded'
|
|
}
|
|
}
|
|
)
|
|
|
|
const data = await response.json()
|
|
|
|
return AccTokens.parse(data)
|
|
}
|