# Install Sinatra: gem install sinatra require_relative "initialize_database" require_relative "database_queries" require_relative "cryptography" require 'sinatra' require 'json' require 'sqlite3' require 'jwt' #puts generate_random_string(256) # #token = JWT.encode payload, hmac_secret, 'HS256' ##puts token # #begin # decoded_token = JWT.decode token, hmac_secret, true, { algorithm: 'HS256' } # puts "Token is valid!" # puts "Decoded token: #{decoded_token}" # # puts data_value = decoded_token.first['data'] # puts test_value = decoded_token.first['test'] #rescue JWT::DecodeError # puts "Invalid token or signature!" #end #puts decoded_token initialize_database post '/auth/login' do content_type :json username = params[:username] password = params[:password] unless check_if_user_exists username status 401 return { reply: "Unuthorized Access" }.to_json end user_id = get_user_id username unless check_password_for_user(user_id, password) status 401 return { reply: "Unuthorized Access" }.to_json end reauthJWT = get_reauth_jwt user_id return reauthJWT.to_json end def get_reauth_jwt (user_id) #claims = get_claims user_id payload = { sub: 'reauthentication' , admin: check_if_user_is_admin(user_id), iss: 'roysathome.net', uid: user_id, #Example id iat: Time.now.to_i, exp: Time.now.to_i + 3600 } hmac_secret = 'WChX-tQWbGbj_pGJQREoFAZGC9JWh58KSk8O7KPj-P8Nd-J88g3eSFDVuNe6zddj0ZB3yxjm_IuPNPyLhiSnxlWHImqXR6ajh3OzrzYm0bNb3f5C4IAScphyEdAfYGMcM-HvYOXxxxp5u5mryfiV3JH1CTqL1CzGyO8df7zUpRKXEXZ5SKmUvhfLU0XKCR_28FAZUgPCAi3GywkDDsH0by68j33BU5cnMT8KiEkHOX4wVUVDQc85_AuE7fN3ji_WkhnDCSLXU9dBCcXM3ziFFeX0RbvIRDG0vKdzwt4TOr4Jws7NP9w11GrUGDFKARZqvT7FTxwxO3MM-mmjb2xyGg' return JWT.encode payload, hmac_secret, 'HS256' #data: {time: 'now', help: 'no'}.to_json end def get_claims (user_id) puts "Getting claims for #{user_id}" db = SQLite3::Database.new('./database/auth.db') results = db.execute(' SELECT C.claim FROM users U INNER JOIN user_claims UC ON U.id = UC.user_id INNER JOIN claims C ON UC.claim_id = U.id WHERE u.id = ? ', user_id) if results.empty? puts 'No claims found.' else results.each do |column| puts "#{column[0]}" end end return results end # Run the application # ruby your_file_name.rb