Ruby toolkit for the Shikimori
Strategy to authenticate with Shikimori via OAuth2 in OmniAuth. To use it, you'll need to sign up for an OAuth2 Application ID and Secret on the Shikimori OAuth Apps Page.
Shikimori's official guide to using OAuth2: https://shikimori.one/oauth
Add to your Gemfile:
gem 'omniauth-shikimori-oauth2', '~> 1.0'
Then bundle install
You can configure several options, which you pass in to the provider method via a Hash:
app_name: the name of the registered OAuth application at https://shikimori.one/oauth/applications
⚠ WARNING! This is an important option that must be specified, as otherwise your IP may be banned for further requests to Shikimori.
scope: required list of access permissions you want to request from the user. Available values:
user_rates - modify your list of anime and manga.messages - read your personal messages, send personal messages on your behalf.comments - comment on behalf of you.topics - create topics and reviews on your behalf.content - modify the website's database.clubs - join and leave clubs.friends - add and remove people as friends.ignores - add and remove people to ignore.client_options: optional Hash of client options. Available options:
site - the OAuth2 provider site host. Default: https://shikimori.oneredirect_uri - the absolute URI to the Redirection Endpoint for use in authorization grants and token exchange.authorize_url - absolute or relative URL path to the Authorization endpoint. Default: /oauth/authorizetoken_url - absolute or relative URL path to the Token endpoint. Default: /oauth/tokentoken_method - HTTP method to use to request token (:get, :post, :post_with_query_string). Default: :postauth_scheme - HTTP method to use to authorize request (:basic_auth or :request_body). Default: :basic_authconnection_opts - Hash of connection options to pass to initialize Faraday with. Default: {}max_redirects - maximum number of redirects to follow. Default: 5raise_errors - whether or not to raise an OAuth2::Error on responses with 400+ status codes. Default: truelogger - which logger to use when OAUTH_DEBUG is enabled. Default: ::Logger.new($stdout)Here's an example of a possible configuration:
provider :shikimori, ENV['SHIKIMORI_KEY'], ENV['SHIKIMORI_KEY'],
scope: %w[user_rates messages comments topics content clubs friends ignores],
app_name: 'My awesome site',
client_options: {
site: 'https://shikimori.org',
redirect_url: 'https://my-awesome-site.example/auth/shikimori/callback',
logger: Rails.logger
}
In config/initializers/omniauth.rb
Rails.application.config.middleware.use OmniAuth::Builder do
provider :shikimori, ENV['SHIKIMORI_KEY'], ENV['SHIKIMORI_KEY'],
scope: %w[user_rates comments topics],
app_name: ENV['SHIKIMORI_APP_NAME'],
client_options: {
redirect_url: 'https://my-awesome-site.example/auth/shikimori/callback',
logger: Rails.logger
}
end
Add middleware to your rack-based application:
use OmniAuth::Builder do
provider :shikimori, ENV['SHIKIMORI_KEY'], ENV['SHIKIMORI_SECRET'],
scope: %w[user_rates comments topics],
app_name: ENV['SHIKIMORI_APP_NAME'],
client_options: {
redirect_url: 'https://my-awesome-site.example/auth/shikimori/callback'
}
end
A Ruby wrapper for the Shikimori's OAuth 2
Install via Rubygems
gem install shikimori-oauth2
... or add to your Gemfile
gem 'shikimori-oauth2', '~> 1.0'
Access the library in Ruby:
require 'shikimori-oauth2'
While Shikimori::OAuth2::Client accepts a range of options when creating a new client instance, Shikimori's configuration API allows you to set your configuration options at the module level. This is particularly handy if you're creating a number of client instances based on some shared defaults. Changing options affects new instances only and will not modify existing Shikimori::OAuth2::Client instances created with previous options.
Configuring module defaults
Every writable attribute in Shikimori::OAuth2::Config can be set in batch:
Shikimori::Oauth2.configure do |c|
c.site = 'https://shikimori.one/'
c.app_name = 'My awesome site'
c.options = {
redirect_uri: 'https://my-awesome-site.example/auth/shikimori/callback',
authorize_url: '/oauth/authorize',
token_url: '/oauth/token',
token_method: :post,
auth_scheme: :basic_auth,
connection_opts: {},
max_redirects: 5,
raise_errors: true,
logger: ::Logger.new($stdout),
}
end
Also available global options from OAuth2 gem.
To get access and refresh tokens, follow this example:
require 'shikimori-oauth2'
client = Shikimori::OAuth2::Client.new('client_id', 'client_secret', app_name: 'Api test')
client.auth_code.authorize_url(scope: 'user_rates+comments+topics', redirect_uri: 'urn:ietf:wg:oauth:2.0:oob')
#=> https://shikimori.one/oauth/authorize?client_id=client_id&redirect_uri=urn%3Aietf%3Awg%3Aoauth%3A2.0%3Aoob&response_type=code&scope=user_rates+comments+topics
#=> Open this link at browser and copy code
access = client.auth_code.get_token('authorization_code_value', redirect_uri: 'urn:ietf:wg:oauth:2.0:oob')
access.token #=> Access token
access.refresh_token #=> Refresh token
access.expires_in #=> 86400
access.expires_at #=> 1708887613
Simple wrapper for the Shikimori API
Install via Rubygems
gem install shikimori-api
... or add to your Gemfile
gem 'shikimori-api', '~> 1.0'
Access the library in Ruby:
require 'shikimori-api'
API methods are accessible as instance methods of the Shikimori::API::Client. Documentation is available at RubyDoc.info:
Basic example to get 10 random anime titles released in the 90s
client = Shikimori::API::Client.new
client.v1.animes(limit: 10, order: 'random', season: '199x') # call /api/animes
To provide authentication credentials, you can pass them as arguments during client initialization:
access_token = 'access_token' #=> User's access token
refresh_token = 'refresh_token' #=> User's refresh token
oauth_app_name = 'Api Test' #=> OAuth2 application name
client = Shikimori::API::Client.new(app_name: oauth_app_name, access_token: access_token, refresh_token: refresh_token)
client.v1.whoami
For passing additional query parameters to request use the following syntax:
client.v1.animes(limit: 10, page: 2, another_param: 'Param')
client.v1.anime_videos(anime_id, first_param: 1, second_param: 2)
... and for request headers use the following syntax:
client.v1.animes(headers: { 'X-Header-Name' => 'My header value' })
This library aims to support and is tested against the following Ruby implementations:
If something doesn't work on one of these Ruby versions, it's a bug.
This library may inadvertently work (or seem to work) on other Ruby implementations, but support will only be provided for the versions listed above.
If you would like this library to support another Ruby version, you may volunteer to be a maintainer. Being a maintainer entails making sure all tests run and pass on that implementation. When something breaks on your implementation, you will be responsible for providing patches in a timely fashion. If critical issues for a particular implementation exist at the time of a major release, support for that Ruby version may be dropped.
This library aims to adhere to Semantic Versioning 2.0.0. Violations of this scheme should be reported as bugs. Specifically, if a minor or patch version is released that breaks backward compatibility, that version should be immediately yanked and/or a new version should be immediately released that restores compatibility. Breaking changes to the public API will only be introduced with new major versions. As a result of this policy, you can (and should) specify a dependency on this gem using the Pessimistic Version Constraint with two digits of precision.
FAQs
Unknown package
We found that shikimori-oauth2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.