- added customer login token API

bapo-sherman · bapo-sherman · commit 4ef9e5080dc3 · 2016-07-19T16:55:19.000-04:00
diff --git a/composer.json b/composer.json
@@ -12,7 +12,8 @@
         }
     ],
     "require": {
-        "php": ">=5.3.0"
+        "php": ">=5.3.0",
+        "firebase/php-jwt": "~3.0"
     },
     "require-dev": {
         "phpunit/phpunit": "4.0.15",
diff --git a/src/Bigcommerce/Api/Client.php b/src/Bigcommerce/Api/Client.php
@@ -2,6 +2,7 @@
 
 namespace Bigcommerce\Api;
 
+use Firebase\JWT\JWT;
 use \Exception as Exception;
 
 /**
@@ -16,6 +17,7 @@ class Client
 	static private $resource;
 	static private $path_prefix = '/api/v2';
 	static private $client_id;
+	static private $client_secret;
 	static private $auth_token;
 	static private $store_hash;
 	static private $stores_prefix = '/stores/%s/v2';
@@ -94,6 +96,9 @@ public static function configureOAuth($settings)
 		self::$client_id = $settings['client_id'];
 		self::$auth_token = $settings['auth_token'];
 		self::$store_hash = $settings['store_hash'];
+
+		self::$client_secret = isset($settings['client_secret']) ? $settings['client_secret'] : null;
+
 		self::$api_path = self::$api_url . sprintf(self::$stores_prefix, self::$store_hash);
 		self::$connection = false;
 	}
@@ -392,6 +397,41 @@ public static function getAuthToken($object)
 		return $connection->post(self::$login_url . '/oauth2/token', $context);
 	}
 
+	/**
+	 * generate login token
+	 *
+	 * @param int $id
+	 * @param string $redirectUrl
+	 * @param string $requestIp
+	 * @return mixed
+	 * @throws Exception
+	 */
+	public static function getCustomerLoginToken($id, $redirectUrl = '', $requestIp = '')
+	{
+		if (empty(self::$client_secret)) {
+			throw new Exception('Cannot sign customer login tokens without a client secret');
+		}
+
+		$payload = array(
+			'iss' => self::$client_id,
+			'iat' => time(),
+			'jti' => bin2hex(random_bytes(32)),
+			'operation' => 'customer_login',
+			'store_hash' => self::$store_hash,
+			'customer_id' => $id
+		);
+
+		if (!empty($redirectUrl)) {
+			$payload['redirect_to'] = $redirectUrl;
+		}
+
+		if (!empty($requestIp)) {
+			$payload['request_ip'] = $requestIp;
+		}
+
+		return JWT::encode($payload, self::$client_secret, 'HS256');
+	}
+
 	/**
 	 * Pings the time endpoint to test the connection to a store.
 	 *
