Authorize a User

# Generate the PKCE pair
CODE_VERIFIER=$(openssl rand -base64 96 | tr -d '\n=' | tr '/+' '_-')
CODE_CHALLENGE=$(printf '%s' "$CODE_VERIFIER" \
  | openssl dgst -sha256 -binary \
  | openssl base64 | tr -d '\n=' | tr '/+' '_-')

echo "Save this verifier for the token request: $CODE_VERIFIER"

# Open this URL in the user's browser
echo "https://platform.chamelio.ai/oauth/authorize\
?response_type=code\
&client_id=cid_your_client_id\
&redirect_uri=https%3A%2F%2Fyour-app.example.com%2Fcallback\
&scope=tasks%3Aread%20tasks%3Awrite\
&code_challenge=$CODE_CHALLENGE\
&code_challenge_method=S256\
&state=xyz123"

import base64
import hashlib
import secrets
from urllib.parse import urlencode

code_verifier = secrets.token_urlsafe(96)
code_challenge = (
    base64.urlsafe_b64encode(hashlib.sha256(code_verifier.encode()).digest())
    .decode()
    .rstrip("=")
)

# Persist code_verifier in the user's session - you need it at the token step
params = {
    "response_type": "code",
    "client_id": "cid_your_client_id",
    "redirect_uri": "https://your-app.example.com/callback",
    "scope": "tasks:read tasks:write",
    "code_challenge": code_challenge,
    "code_challenge_method": "S256",
    "state": secrets.token_urlsafe(16),
}

authorize_url = f"https://platform.chamelio.ai/oauth/authorize?{urlencode(params)}"
print(authorize_url)

const toBase64Url = (bytes) =>
  btoa(String.fromCharCode(...new Uint8Array(bytes)))
    .replace(/\+/g, '-')
    .replace(/\//g, '_')
    .replace(/=+$/, '');

const codeVerifier = toBase64Url(crypto.getRandomValues(new Uint8Array(64)));
const digest = await crypto.subtle.digest(
  'SHA-256',
  new TextEncoder().encode(codeVerifier)
);
const codeChallenge = toBase64Url(digest);

// Persist codeVerifier in the user's session - you need it at the token step
const params = new URLSearchParams({
  response_type: 'code',
  client_id: 'cid_your_client_id',
  redirect_uri: 'https://your-app.example.com/callback',
  scope: 'tasks:read tasks:write',
  code_challenge: codeChallenge,
  code_challenge_method: 'S256',
  state: crypto.randomUUID()
});

window.location.href =
  `https://platform.chamelio.ai/oauth/authorize?${params}`;