OAuth 2.0

1
import { randomBytes, createHash } from 'crypto';
2
3
const codeVerifier = randomBytes(32).toString('base64url');
4
const codeChallenge = createHash('sha256')
5
  .update(codeVerifier)
6
  .digest('base64url');

1
// Express
2
req.session.codeVerifier = codeVerifier;
3
4
// Next.js
5
cookies().set('code_verifier', codeVerifier, { httpOnly: true, secure: true });

1
const authUrl = new URL('https://auth.fanvue.com/oauth2/auth');
2
authUrl.searchParams.set('client_id', process.env.CLIENT_ID);
3
authUrl.searchParams.set('redirect_uri', process.env.REDIRECT_URI);
4
authUrl.searchParams.set('response_type', 'code');
5
authUrl.searchParams.set('scope', 'openid offline_access offline read:self');
6
authUrl.searchParams.set('state', randomBytes(32).toString('hex'));
7
authUrl.searchParams.set('code_challenge', codeChallenge);
8
authUrl.searchParams.set('code_challenge_method', 'S256');
9
10
res.redirect(authUrl.toString());

1
const response = await fetch('https://auth.fanvue.com/oauth2/token', {
2
  method: 'POST',
3
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
4
  body: new URLSearchParams({
5
    grant_type: 'authorization_code',
6
    client_id: process.env.CLIENT_ID,
7
    client_secret: process.env.CLIENT_SECRET,
8
    code: authorizationCode,
9
    redirect_uri: process.env.REDIRECT_URI,
10
    code_verifier: codeVerifier,
11
  }),
12
});
13
14
const tokens = await response.json();

1
const response = await fetch('https://api.fanvue.com/users/me', {
2
  headers: { 'Authorization': `Bearer ${tokens.access_token}` }
3
});

1
const response = await fetch('https://auth.fanvue.com/oauth2/token', {
2
  method: 'POST',
3
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
4
  body: new URLSearchParams({
5
    grant_type: 'refresh_token',
6
    client_id: process.env.CLIENT_ID,
7
    client_secret: process.env.CLIENT_SECRET,
8
    refresh_token: tokens.refresh_token,
9
  }),
10
});