app.rb

# frozen_string_literal: true

$LOAD_PATH.push File.expand_path("../../../../lib", __FILE__)
require "jwt"
require "jwt_sessions"
require "sinatra"
require "sinatra/namespace"

JWTSessions.signing_key = "secret key"
JWTSessions.token_store = ENV["STORE_ADAPTER"] || "redis"

get "/" do
  "Welcome to Sinatra app!"
end

namespace "/api/v1" do
  include JWTSessions::Authorization

  # rack headers standard
  ACCESS_HEADER  = "HTTP_#{JWTSessions.access_header.downcase.gsub(/-/,'_').upcase}"
  REFRESH_HEADER = "HTTP_#{JWTSessions.refresh_header.downcase.gsub(/-/,'_').upcase}"
  CSRF_HEADER    = "HTTP_#{JWTSessions.csrf_header.downcase.gsub(/-/,'_').upcase}"

  before do
    content_type "application/json"
  end

  def request_headers
    jwt_headers = {}
    jwt_headers[JWTSessions.access_header]  = request.env[ACCESS_HEADER] if request.env[ACCESS_HEADER]
    jwt_headers[JWTSessions.refresh_header] = request.env[REFRESH_HEADER] if request.env[REFRESH_HEADER]
    jwt_headers[JWTSessions.csrf_header]    = request.env[CSRF_HEADER] if request.env[CSRF_HEADER]
    jwt_headers
  end

  def request_cookies
    request.cookies
  end

  def request_method
    request.request_method
  end

  error JWTSessions::Errors::Unauthorized do
    { error: "Unauthorized" }.to_json
  end

  post "/login" do
    access_payload = { key: "big access value" }
    refresh_payload = { refresh_key: "small refresh value" }
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: refresh_payload,
      refresh_by_access_allowed: true
    )
    session.login.to_json
  end

  post "/refresh" do
    authorize_refresh_request!
    access_payload = payload.merge({ key: "reloaded access value" })
    session = JWTSessions::Session.new(payload: access_payload, refresh_payload: payload)
    session.refresh(found_token).to_json
  end

  post "/refresh_by_cookies" do
    authorize_by_refresh_cookie!
    access_payload = payload.merge({ key: "new access value" })
    session = JWTSessions::Session.new(payload: access_payload, refresh_payload: payload)
    session.refresh(found_token).to_json
  end

  post "/refresh_by_headers" do
    authorize_by_refresh_header!
    access_payload = payload.merge({ key: "a little shy access value" })
    session = JWTSessions::Session.new(payload: access_payload, refresh_payload: payload)
    session.refresh(found_token).to_json
  end

  post "/refresh_by_access" do
    authorize_refresh_by_access_request!
    access_payload = payload.merge({ key: "a big brave access value" })
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: payload,
      refresh_by_access_allowed: true
    )
    session.refresh_by_access_payload.to_json
  end

  post "/refresh_by_access_by_cookies" do
    authorize_refresh_by_access_cookie!
    access_payload = payload.merge({ key: "such many auth methods much wow access value" })
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: payload,
      refresh_by_access_allowed: true
    )
    session.refresh_by_access_payload.to_json
  end

  post "/refresh_by_access_by_headers" do
    authorize_refresh_by_access_header!
    access_payload = payload.merge({ key: "yet another access value" })
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: payload,
      refresh_by_access_allowed: true
    )
    session.refresh_by_access_payload.to_json
  end

  post "/login_namespaced" do
    access_payload = { key: "hellooo" }
    refresh_payload = { refresh_key: "im a humble value" }

    namespace = "custom-namespace"
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: refresh_payload,
      namespace: namespace
    )

    session.login.to_json
  end

  post "/refresh_namespaced" do
    authorize_refresh_request!
    access_payload = payload.merge({ key: "reloaded hellooo" })

    namespace = "custom-namespace"
    session = JWTSessions::Session.new(
      payload: access_payload,
      refresh_payload: payload,
      namespace: namespace
    )

    session.refresh(found_token).to_json
  end

  post "/login_namespaced_with_refresh_by_access_allowed" do
    access_payload = { key: "guten tag" }

    namespace = "custom-namespace"
    session = JWTSessions::Session.new(
      payload: access_payload,
      namespace: namespace,
      refresh_by_access_allowed: true
    )

    session.login.to_json
  end

  post "/refresh_by_access_namespaced" do
    authorize_refresh_by_access_request!
    access_payload = payload.merge({ key: "reloaded guten tag" })

    namespace = "custom-namespace"
    session = JWTSessions::Session.new(
      payload: access_payload,
      namespace: namespace,
      refresh_by_access_allowed: true
    )

    session.refresh_by_access_payload.to_json
  end

  get "/payload" do
    authorize_access_request!
    payload.to_json
  end

  get "/payload_by_cookies" do
    authorize_access_request_by_cookies!
    payload.to_json
  end

  get "/payload_by_headers" do
    authorize_access_request_by_headers!
    payload.to_json
  end

  get "/payload_without_authorize" do
    payload.to_json
  end
end