ares-ide

# Stripped-down OAuth implementation that works with the Dropbox API server. class Dropbox.Oauth # Creates an Oauth instance that manages an application's keys and token. # # @param {Object} options the following properties # @option options {String} key the Dropbox application's key (consumer key, # in OAuth vocabulary); browser-side applications should use # Dropbox.encodeKey to obtain an encoded key string, and pass it as the # key option # @option options {String} secret the Dropbox application's secret (consumer # secret, in OAuth vocabulary); browser-side applications should not use # the secret option; instead, they should pass the result of # Dropbox.encodeKey as the key option constructor: (options) -> @key = @k = null @secret = @s = null @token = null @tokenSecret = null @_appHash = null @reset options # Creates an Oauth instance that manages an application's keys and token. # # @see Dropbox.Oauth#constructor for options reset: (options) -> if options.secret @k = @key = options.key @s = @secret = options.secret @_appHash = null else if options.key @key = options.key @secret = null secret = atob dropboxEncodeKey(@key).split('|', 2)[1] [k, s] = secret.split '?', 2 @k = decodeURIComponent k @s = decodeURIComponent s @_appHash = null else unless @k throw new Error 'No API key supplied' if options.token @setToken options.token, options.tokenSecret else @setToken null, '' # Sets the OAuth token to be used for future requests. setToken: (token, tokenSecret) -> if token and (not tokenSecret) throw new Error 'No secret supplied with the user token' @token = token @tokenSecret = tokenSecret || '' # This is part of signing, but it's set here so it can be cached. @hmacKey = Dropbox.Xhr.urlEncodeValue(@s) + '&' + Dropbox.Xhr.urlEncodeValue(tokenSecret) null # Computes the value of the Authorization HTTP header. # # This method mutates the params object, and removes all the OAuth-related # parameters from it. # # @param {String} method the HTTP method used to make the request ('GET', # 'POST', etc) # @param {String} url the HTTP URL (e.g. "http://www.example.com/photos") # that receives the request # @param {Object} params an associative array (hash) containing the HTTP # request parameters; the parameters should include the oauth_ # parameters generated by calling {Dropbox.Oauth#boilerplateParams} # @return {String} the value to be used for the Authorization HTTP header authHeader: (method, url, params) -> @addAuthParams method, url, params # Collect all the OAuth parameters. oauth_params = [] for param, value of params if param.substring(0, 6) == 'oauth_' oauth_params.push param oauth_params.sort() # Remove the parameters from the params hash and add them to the header. header = [] for param in oauth_params header.push Dropbox.Xhr.urlEncodeValue(param) + '="' + Dropbox.Xhr.urlEncodeValue(params[param]) + '"' delete params[param] # NOTE: the space after the comma is optional in the OAuth spec, so we'll # skip it to save some bandwidth 'OAuth ' + header.join(',') # Generates OAuth-required HTTP parameters. # # This method mutates the params object, and adds the OAuth-related # parameters to it. # # @param {String} method the HTTP method used to make the request ('GET', # 'POST', etc) # @param {String} url the HTTP URL (e.g. "http://www.example.com/photos") # that receives the request # @param {Object} params an associative array (hash) containing the HTTP # request parameters; the parameters should include the oauth_ # parameters generated by calling {Dropbox.Oauth#boilerplateParams} # @return {String} the value to be used for the Authorization HTTP header addAuthParams: (method, url, params) -> # Augment params with OAuth parameters. @boilerplateParams params params.oauth_signature = @signature method, url, params params # Adds boilerplate OAuth parameters to a request's parameter list. # # This should be called right before signing a request, to maximize the # chances that the OAuth timestamp will be fresh. # # @param {Object} params an associative array (hash) containing the # parameters for an OAuth request; the boilerplate parameters will be # added to this hash # @return {Object} params boilerplateParams: (params) -> params.oauth_consumer_key = @k params.oauth_nonce = Dropbox.Oauth.nonce() params.oauth_signature_method = 'HMAC-SHA1' params.oauth_token = @token if @token params.oauth_timestamp = Math.floor(Date.now() / 1000) params.oauth_version = '1.0' params # Generates a nonce for an OAuth request. # # @return {String} the nonce to be used as the oauth_nonce parameter @nonce: -> # Nonces have to be unique for requests with the same timestamp. # http://tools.ietf.org/html/rfc5849#section-3.3 Math.random().toString(36) # Computes the signature for an OAuth request. # # @param {String} method the HTTP method used to make the request ('GET', # 'POST', etc) # @param {String} url the HTTP URL (e.g. "http://www.example.com/photos") # that receives the request # @param {Object} params an associative array (hash) containing the HTTP # request parameters; the parameters should include the oauth_ # parameters generated by calling {Dropbox.Oauth#boilerplateParams} # @return {String} the signature, ready to be used as the oauth_signature # OAuth parameter signature: (method, url, params) -> string = method.toUpperCase() + '&' + Dropbox.Xhr.urlEncodeValue(url) + '&' + Dropbox.Xhr.urlEncodeValue(Dropbox.Xhr.urlEncode(params)) base64HmacSha1 string, @hmacKey # @return {String} a string that uniquely identifies the OAuth application appHash: -> return @_appHash if @_appHash @_appHash = base64Sha1(@k).replace(/\=/g, '') # Polyfill for Internet Explorer 8. unless Date.now? Date.now = () -> (new Date()).getTime()