index.js

var Request = require('request');
var Querystring = require('querystring');
var Crypto = require('crypto');

function AccountKit() {
  var app_id = "";
  var app_secret = "";
  var api_version = "v1.1";
  var require_app_secret = true;
  var base_url = "https://graph.accountkit.com/";

  return {
    set: function(id, secret, version) {
      app_id = id;
      app_secret = secret;
      if (version !== undefined) {
        api_version = version;
      }
    },
    requireAppSecret: function(_require_app_secret) {
      require_app_secret = _require_app_secret;
    },
    getApiVersion: function() {
      return api_version;
    },
    getAppAccessToken: function() {
      return ['AA', app_id, app_secret].join('|');
    },
    getInfoEndpoint: function() {
      return base_url + api_version + "/me";
    },
    getRemovalEndpoint: function(id) {
      return base_url + api_version + '/' + id;
    },
    getTokenExchangeEnpoint: function() {
      return base_url + api_version + "/access_token";
    },
    getAccountInfo: function(authorization_code, callback) {
      var self = this;

      var params = {
        grant_type: 'authorization_code',
        code: authorization_code,
        access_token: this.getAppAccessToken(),
      };

      var token_exchange_url = this.getTokenExchangeEnpoint() + '?' + Querystring.stringify(params);
      Request.get({
        url: token_exchange_url,
        json: true
      }, function(error, resp, respBody) {
        if (error) {
          return callback(error);
        } else if (respBody.error) {
          return callback(respBody.error);
        } else if (resp.statusCode !== 200) {
          var errorMsg = "Invalid AccountKit Graph API status code (" + resp.statusCode + ")";
          return callback(errorMsg);
        }

        var me_endpoint_url = self.getInfoEndpoint() + '?access_token=' + respBody.access_token;
        if (require_app_secret) {
          me_endpoint_url += '&appsecret_proof=' + Crypto.createHmac('sha256', app_secret).update(respBody.access_token).digest('hex');
        }

        Request.get({
          url: me_endpoint_url,
          json: true
        }, function(error, resp, respBody) {
          if (error) {
            return callback(error);
          } else if (respBody.error) {
            return callback(respBody.error);
          } else if (resp.statusCode !== 200) {
            var errorMsg = "Invalid AccountKit Graph API status code (" + resp.statusCode + ")";
            return callback(errorMsg);
          }

          return callback(null, respBody);
        });
      });
    },
    removeUser: function(id, callback) {
      var self = this;
      var delUrl = this.getRemovalEndpoint(id) + "?" + "access_token=" + this.getAppAccessToken();

      Request.del({
        url: delUrl,
        json: true
      }, function(error, resp, respBody) {
        if (error) {
          return callback(error);
        } else if (respBody.error) {
          return callback(respBody.error);
        } else if (resp.statusCode !== 200) {
          var errorMsg = "Invalid AccountKit Graph API status code (" + resp.statusCode + ")";
          return callback(errorMsg);
        }

        return callback(null, respBody);
      });
    }
  };
}

module.exports = new AccountKit();