JavaScript SDK

Client-side SDK

The client-side SDK requires you to create an instance of the PublicApiClient, providing the tenantId.

let client = PublicApiClient.build(tenant);

Optionally, Zephr environment can be provided, too:

let client = PublicApiClient.build(tenant, 'staging');

It is possible to specify a base URL for the Zephr service, if it is non-standard (not normally needed):

let client =
PublicApiClient.build(tenant).overrideBaseUrl('http://localhost:8080');

For client-side implementations the SDK supports the following function

Register:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let sessionId = await client.register({
    identifiers: {
       'email_address': 'helen@blaize.io'
    },
    validators: {
       'password': 'sup3r_s3cr3t'
    },
    attributes: {
       'foo': 'bar'
    }
});

Login:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let sessionId = await client.login({
    identifiers: {
       'email_address': 'helen@blaize.io'
    },
    validators: {
       'password': 'sup3r_s3cr3t'
    }
});

Logout:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

client.logout(getSessionId());

Forget me:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

client.forgetMe(getSessionId());

Entitlement challenge:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';
let articleEntitlementId = '5341dc17-f91b-4311-b9ee-6906024c87a2';
let videoEntitlementId = '2b7fa1f5-795d-459e-84eb-8e0c62fb018f';

let client = PublicApiClient.build(tenant);

let results = await client.challenge(getSessionId(),
    [articleEntitlementId, videoEntitlementId]);

if (! results[articleEntitlementId]) {
       console.log("You cannot view articles");
    } if (! results[videoEntitlementId ]) {
       console.log("You cannot view videos");
}

Request-rule decision:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let decision = await client.accessDecision(getSessionId(),
'/some/content', 'GET', {referrer: 'https://www.facebook.com'});

console.log(decision.status);
console.log(decision.body);

Get profile:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let profile = await client.retrieveProfile(getSessionId());

console.log(JSON.stringify(profile));

Update profile:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let profile = {
    'favourite-color': 'Red'
};
let merge = true; // if false, the new profile will completely replace
the entire old profile, if true only provided fields will be replaced

await client.updateProfile(getSessionId(), profile, merge);

Get extended profile document:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let profile = await client.retrieveExtendedProfile(getSessionId(),
'reading-history');

console.log(JSON.stringify(profile));

Update extended profile document:

const PublicApiClient = require('./blaize-sdk.js').public;

let tenant = 'mysite';

let client = PublicApiClient.build(tenant);

let profile = {
    'recent': ['/1.html', '/2.html']
};

await client.writeExtendedProfile(getSessionId(), 'reading-history',
profile);

Server-side SDK

The server-side SDK is essentially a REST client which performs HMAC request signing for the API. This SDK requires the implementor to
specify the host, path, method, body, headers and query parameters for a request and returns the response as a JSON object or plain text.

In order to make requests to the Admin API you will need to first create a keypair, which you can do in the Zephr Admin Console.

One can also use the server-side SDK to sign request for use with a different HTTP client.

const AdminApiClient = require('./blaize-sdk.js').admin;

let tenant = 'mysite';

const accessKey = getAccessKeySecurely();
const secretKey = getSecretKeySecurely();
let client = AdminApiClient.build(tenant, accessKey, secretKey);

let responseBody = await client.get('/v3/users');

const AdminApiClient = require('./blaize-sdk.js').admin;
const axios = require('axios');

let tenant = 'mysite';

const accessKey = getAccessKeySecurely();
const secretKey = getSecretKeySecurely();
let body = ''; // This needs to be bytewise identical to the payload,
whitespace included
let path = '/v3/users';
let method = 'GET';
let timestamp = new Date().getTime();
let nonce = Math.round(Math.random() * 1000000000000).toString(16);

let signature =
AdminApiClient.HmacSigner('SHA-256').signRequest(secretKey, body, path,
method, timestamp, nonce);

let authorizationHeader = 'BLAIZE-HMAC-SHA256 ' + accessKey + ':' +
timestamp + ':' + nonce + ':' + signature;

axios.get('https://admin.' + tenant + '.blaize.io' + path, {
    headers: {
       authorization: authorizationHeader
    }
});