Bike Index OAuth2 Strategy for OmniAuth 1.0.
Supports the OAuth 2.0 server-side and client-side flows.
To be able to use OAuth on the Bike Index, you have to create an application. Go to BikeIndex.org/oauth/applications to add your application.
Once you've added your application and your routes, you'll be able to see your Application ID and Secret, which you will need for omniauth.
Note: Callback url has to be an exact match - if your url is http://localhost:3001/users/auth/bike_index/callback
you must enter that exactly - http://localhost:3001/users/auth/
will not work.
Check out API V2 Documentation to see what can be done with authenticated users.
First add it to you Gemfile:
gem 'omniauth-bike-index'
Here's a quick example, adding the middleware to a Rails app in
config/initializers/omniauth.rb
:
Rails.application.config.middleware.use OmniAuth::Builder do
provider :bike_index, ENV['BIKEINDEX_APP_ID'], ENV['BIKEINDEX_APP_SECRET']
end
Your BIKEINDEX_APP_ID
and your BIKEINDEX_APP_SECRET
are both application specific. To create or view your applications go to BikeIndex.org/oauth/applications.
Edit your routes.rb file to have:
devise_for :users, :controllers => { :omniauth_callbacks => "omniauth_callbacks" }
And create a file called omniauth_callbacks_controller.rb
which should have this inside:
class OmniauthCallbacksController < Devise::OmniauthCallbacksController
def bike_index
# Delete the code inside of this method and write your own.
# The code below is to show you where to access the data.
raise request.env["omniauth.auth"].to_json
end
end
The default scope is public
- which will be submitted unless you configure additional scopes. You can set scopes in the configuration with a space seperated list, e.g. for Devise
Devise.setup do |config|
config.omniauth :bike_index, ENV['BIKEINDEX_APP_ID'], ENV['BIKEINDEX_APP_SECRET'], scope: 'read_bikes write_user read_user`
end
Available scopes: read_user
, write_user
, read_bikes
, write_bikes
If you don't include a scope, the response will include a uid
from Bike Index for the user and nothing else.
If you include the read_bikes
scope, the response will include an array of the ids the user has registered on the Index bike_ids: [3414, 29367]
You can use these IDs to access information about the bikes - e.g. BikeIndex.org/api/v1/bikes/3414 & /api/v1/bikes/29367
If you include the read_user
scope, the response will include the user's nickname, email and name. You will also see their twitter handle and avatar if they have added them. The keys for these items -
nickname
, email
, name
, twitter
& image
- all accessible in the request.env['omniauth.auth']
, e.g. request.env['omniauth.auth'].info.email
You can also see the authetication hash (in JSON format) by going to the authentication url on the Bike Index with the user's access token - https://bikeindex.org/api/v2/users/current?access_token=<OAUTH_ACCESS_TOKEN>