authentication.js

"use strict";
const NexusClient = require("grindery-nexus-client").default;

const getAccessToken = (z, bundle) => {
  const promise = z.request("https://orchestrator.grindery.org/oauth/token", {
    method: "POST",
    body: {
      code: bundle.inputData.code,
      grant_type: "authorization_code",
    },
    headers: {
      "content-type": "application/x-www-form-urlencoded",
    },
  });

  // Needs to return at minimum, `access_token`, and if your app also does refresh, then `refresh_token` too
  return promise.then((response) => {
    if (response.status !== 200) {
      throw new Error("Unable to fetch access token: " + response.content);
    }

    const result = JSON.parse(response.content);
    return {
      access_token: result.access_token,
      refresh_token: result.refresh_token,
      expires_in: result.expires_in,
    };
  });
};

const refreshAccessToken = (z, bundle) => {
  const promise = z.request("https://orchestrator.grindery.org/oauth/token", {
    method: "POST",
    body: {
      refresh_token: bundle.authData.refresh_token,
      grant_type: "refresh_token",
    },
    headers: {
      "content-type": "application/x-www-form-urlencoded",
    },
  });

  // Needs to return `access_token`. If the refresh token stays constant, can skip it. If it changes, can
  // return it here to update the user's auth on Zapier.
  return promise.then((response) => {
    if (response.status !== 200) {
      throw new Error("Unable to fetch access token: " + response.content);
    }

    const result = JSON.parse(response.content);
    return {
      access_token: result.access_token,
    };
  });
};

const testAuth = (z, bundle) => {
  // Normally you want to make a request to an endpoint that is either specifically designed to test auth, or one that
  // every user will have access to, such as an account or profile endpoint like /me.

  try {
    const client = new NexusClient(bundle.authData.access_token);
    const user = client.user.get();
    if (user !== null) {
      return { address: user.address };
    } else {
      return null;
    }
  } catch (error) {
    if (error.message === "Invalid access token") {
      throw new z.errors.RefreshAuthError();
    }
  }
};

/*const refreshAccessToken = async (z, bundle) => {
  const response = await z.request({
    url: "https://orchestrator.grindery.org/oauth/token",
    method: "POST",
    body: {
      grant_type: "refresh_token",
      refresh_token: bundle.authData.refresh_token,
    },
    headers: {
      "content-type": "application/x-www-form-urlencoded",
    },
  });

  // If you're using core v9.x or older, you should call response.throwForStatus()
  // or verify response.status === 200 before you continue.

  // This function should return `access_token`.
  // If the refresh token stays constant, no need to return it.
  // If the refresh token does change, return it here to update the stored value in
  // Zapier
  z.console.log("Refresh Token Ran: ", response.data);
};*/

module.exports = {
  config: {
    // "basic" auth automatically creates "username" and "password" input fields. It
    // also registers default middleware to create the authentication header.
    type: "oauth2",
    test: testAuth,
    /*test: {
      url: "https://connex-zapier-grindery.herokuapp.com/me",
      method: "GET",
      headers: {
        Authorization: "Bearer {{bundle.authData.access_token}}",
        accept: "application/json",
      },
      body: {},
      removeMissingValuesFrom: {},
    },*/
    oauth2Config: {
      authorizeUrl: {
        method: "GET",
        url: `https://orchestrator.grindery.org/oauth/authorize`,
        params: {
          response_type: "code",
          redirect_uri: "{{bundle.inputData.redirect_uri}}",
        },
      },
      getAccessToken: getAccessToken,
      refreshAccessToken: refreshAccessToken,
      autoRefresh: true,
    },

    // Define any input app's auth requires here. The user will be prompted to enter
    // this info when they connect their account.
    fields: [
      /*{
        key: "wallet_address",
        label: "Wallet Address",
        helpText: "Enter your Wallet Address",
        required: true,
      },*/
    ],

    // This template string can access all the data returned from the auth test. If
    // you return the test object, you'll access the returned data with a label like
    // `{{json.X}}`. If you return `response.data` from your test, then your label can
    // be `{{X}}`. This can also be a function that returns a label. That function has
    // the standard args `(z, bundle)` and data returned from the test can be accessed
    // in `bundle.inputData.X`.
    connectionLabel: "{{address}}",
  },
  befores: [],
  afters: [],
};