Note |
---|
From version 4.0 the recommended authentication method is JWT and not the URL signing described below |
Example of how to sign a request in Ruby (1.9.x)
Code Block |
---|
language | ruby |
---|
theme | Eclipse | language |
---|
ruby | title | Ruby |
---|
|
require 'digest/md5'
require "erb"
include ERB::Util
token = "35f94ba7c9bd4b8887b66baa8b566c285436gdfdhgfh7b66bgfg4436c28"
puts "Token:\n #{token} \n\n"
secret = "2c9e39f72f434a8fsdfg43321dsafg"
puts "Secret:\n #{secret} \n\n"
request = "http://temporarysite.meridix.se/api/iCentrex36customer/SSOlistcustomers"
puts "Request:\n #{request} \n\n"
username = "basic@sigtunahem.se"
puts "Username:\n #{username} \n\n"
nonce = Random.new.rand(100000...999999).to_s
puts "Nonce:\n #{nonce} \n\n"
timestamp = Time.now.utc.strftime("%Y%m%d%H%M%S");
puts "Timestamp:\n #{timestamp} \n\n"
parameters =
[
"auth_nonce=" + nonce,
"auth_timestamp=" + timestamp,
"auth_token=" + token,
"u="
+ username
]
parameters = parameters.sort
requestEncoded = url_encode(request);
puts "RequestEncoded:\n #{requestEncoded} \n\n"
parametersConcated = parameters.join("&")
puts "ParametersConcated:\n #{parametersConcated} \n\n"
parametersConcatedEncoded = url_encode(parametersConcated)
puts "ParametersConcatedEncoded:\n #{parametersConcatedEncoded} \n\n"
# IMPORTANT - The GET&-prefix must be change to POST& etc. when using different HTTP Verbs than GET.
verbRequestQuery = "GET&" + requestEncoded + "&" + parametersConcatedEncoded + "&" + secret;
puts "VerbRequestQuery:\n #{verbRequestQuery} \n\n"
signature = Digest::MD5.hexdigest(verbRequestQuery)
puts "Signature:\n #{signature} \n\n"
signedRequest = request + "?" + parametersConcated + "&auth_signature=" + signature
puts "SignedRequest:\n #{signedRequest} \n\n"
|
...