Securely hashed request

tokenizer.rb

##
# Forms a tokenized request payload

class Tokenizer

  ##
  # Initialize with a secret and a message to encode
  #   Tokenizer.new(secret: String, message: Hash)

  def initialize(args)
    @secret = args[:secret]
    @message = args[:message]
  end

  ##
  # Creates a signed token of the request

  def tokenize
    Base64.strict_encode64(signed_message.to_json)
  end

  private

  def signature
    OpenSSL::HMAC.hexdigest("sha256", @secret, encoded_message)
  end

  def encoded_message
    Base64.strict_encode64(message: @message.to_json , expires_at: 30.seconds.from.now)
  end

  def signed_message
    { data: encoded_message, secret: signature }
  end
end

# Use it like:


message = { username: "[email protected]" }

signed_message = Tokenizer.new(secret: "my_super_secret_key", message: message).tokenize

# Now we have a signed message that we can send along; that will expire after 30 seconds.