Tổng quan O3O DocBuilder

import os
import time

import jwt  # gói PyJWT
import requests

secret = os.environ["O3O_DOCBUILDER_JWT_SECRET"]
token = jwt.encode({"sub": "crm-noi-bo", "exp": int(time.time()) + 3600}, secret, algorithm="HS256")

r = requests.get("http://localhost:8080/v1/limits", headers={"Authorization": f"Bearer {token}"}, timeout=30)
print(r.status_code, r.json())

import { createHmac } from "node:crypto";

const b64url = (data) => Buffer.from(data).toString("base64url");

function signJwt(secret, sub, ttlSeconds = 3600) {
  const header = b64url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
  const payload = b64url(JSON.stringify({ sub, exp: Math.floor(Date.now() / 1000) + ttlSeconds }));
  const signature = createHmac("sha256", secret).update(`${header}.${payload}`).digest("base64url");
  return `${header}.${payload}.${signature}`;
}

const token = signJwt(process.env.O3O_DOCBUILDER_JWT_SECRET, "crm-noi-bo");
const res = await fetch("http://localhost:8080/v1/limits", { headers: { Authorization: `Bearer ${token}` } });
console.log(res.status, await res.json());

<?php
function b64url(string $data): string
{
    return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
}

function sign_jwt(string $secret, string $sub, int $ttl = 3600): string
{
    $header = b64url(json_encode(['alg' => 'HS256', 'typ' => 'JWT']));
    $payload = b64url(json_encode(['sub' => $sub, 'exp' => time() + $ttl]));
    $signature = b64url(hash_hmac('sha256', "$header.$payload", $secret, true));
    return "$header.$payload.$signature";
}

$token = sign_jwt(getenv('O3O_DOCBUILDER_JWT_SECRET'), 'crm-noi-bo');
$ch = curl_init('http://localhost:8080/v1/limits');
curl_setopt_array($ch, [
    CURLOPT_HTTPHEADER => ["Authorization: Bearer $token"],
    CURLOPT_RETURNTRANSFER => true,
]);
echo curl_exec($ch);

using System.Net.Http.Headers;
using System.Security.Cryptography;
using System.Text;
using System.Text.Json;

static string B64Url(byte[] data) =>
    Convert.ToBase64String(data).TrimEnd('=').Replace('+', '-').Replace('/', '_');

static string SignJwt(string secret, string sub, int ttlSeconds = 3600)
{
    var header = B64Url(JsonSerializer.SerializeToUtf8Bytes(new { alg = "HS256", typ = "JWT" }));
    var exp = DateTimeOffset.UtcNow.ToUnixTimeSeconds() + ttlSeconds;
    var payload = B64Url(JsonSerializer.SerializeToUtf8Bytes(new { sub, exp }));
    using var hmac = new HMACSHA256(Encoding.UTF8.GetBytes(secret));
    var signature = B64Url(hmac.ComputeHash(Encoding.UTF8.GetBytes($"{header}.{payload}")));
    return $"{header}.{payload}.{signature}";
}

var token = SignJwt(Environment.GetEnvironmentVariable("O3O_DOCBUILDER_JWT_SECRET")!, "crm-noi-bo");
using var http = new HttpClient();
http.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token);
Console.WriteLine(await http.GetStringAsync("http://localhost:8080/v1/limits"));

b64url() { openssl base64 -A | tr '+/' '-_' | tr -d '='; }

SECRET="$O3O_DOCBUILDER_JWT_SECRET"
HEADER=$(printf '{"alg":"HS256","typ":"JWT"}' | b64url)
PAYLOAD=$(printf '{"sub":"crm-noi-bo","exp":%d}' "$(( $(date +%s) + 3600 ))" | b64url)
SIGNATURE=$(printf '%s.%s' "$HEADER" "$PAYLOAD" | openssl dgst -sha256 -hmac "$SECRET" -binary | b64url)
TOKEN="$HEADER.$PAYLOAD.$SIGNATURE"

curl -sS http://localhost:8080/v1/limits -H "Authorization: Bearer $TOKEN"

curl -sS http://localhost:8080/v1/limits \
  -H "Authorization: Bearer O3O_DEMO_KEY"

const BASE_URL = "http://localhost:8080";
const HEADERS = { Authorization: "Bearer O3O_DEMO_KEY" };

const res = await fetch(`${BASE_URL}/v1/limits`, { headers: HEADERS });
if (!res.ok) throw new Error(`${res.status}: ${await res.text()}`);
console.log(await res.json());

import requests

BASE_URL = "http://localhost:8080"
HEADERS = {"Authorization": "Bearer O3O_DEMO_KEY"}

r = requests.get(f"{BASE_URL}/v1/limits", headers=HEADERS, timeout=30)
if not r.ok:
    raise RuntimeError(f"{r.status_code}: {r.text}")
print(r.json())

<?php
$ch = curl_init("http://localhost:8080/v1/limits");
curl_setopt_array($ch, [
    CURLOPT_HTTPHEADER => ["Authorization: Bearer O3O_DEMO_KEY"],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
if ($body === false || $status >= 400) {
    throw new RuntimeException("HTTP $status: " . ($body === false ? curl_error($ch) : $body));
}
print_r(json_decode($body, true));

using System.Net.Http.Headers;

using var http = new HttpClient { Timeout = TimeSpan.FromSeconds(30) };
http.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", "O3O_DEMO_KEY");

using var res = await http.GetAsync("http://localhost:8080/v1/limits");
if (!res.IsSuccessStatusCode)
    throw new HttpRequestException($"{(int)res.StatusCode}: {await res.Content.ReadAsStringAsync()}");
Console.WriteLine(await res.Content.ReadAsStringAsync());

curl -sS http://localhost:8080/v1/status

const BASE_URL = "http://localhost:8080";

const res = await fetch(`${BASE_URL}/v1/status`);
if (!res.ok) throw new Error(`${res.status}: ${await res.text()}`);
console.log(await res.json());

import requests

BASE_URL = "http://localhost:8080"

r = requests.get(f"{BASE_URL}/v1/status", timeout=30)
if not r.ok:
    raise RuntimeError(f"{r.status_code}: {r.text}")
print(r.json())

<?php
$ch = curl_init("http://localhost:8080/v1/status");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
if ($body === false || $status >= 400) {
    throw new RuntimeException("HTTP $status: " . ($body === false ? curl_error($ch) : $body));
}
print_r(json_decode($body, true));

using var http = new HttpClient { Timeout = TimeSpan.FromSeconds(30) };

using var res = await http.GetAsync("http://localhost:8080/v1/status");
if (!res.IsSuccessStatusCode)
    throw new HttpRequestException($"{(int)res.StatusCode}: {await res.Content.ReadAsStringAsync()}");
Console.WriteLine(await res.Content.ReadAsStringAsync());