1#!/usr/bin/env bash
2set -euo pipefail
3 
4BASE_URL="https://api.sendpulse.com"
5CLIENT_ID="${SENDPULSE_CLIENT_ID:-}"
6CLIENT_SECRET="${SENDPULSE_CLIENT_SECRET:-}"
7DRY_RUN=0
8 
9usage() {
10  cat <<'EOF'
11Usage:
12  rest_oauth_smoke.sh [--client-id <id>] [--client-secret <secret>] [--base-url <url>] [--dry-run]
13 
14Purpose:
15  Obtain a SendPulse OAuth access token with client_credentials,
16  then run a safe GET /user/info smoke test.
17 
18Env fallback:
19  SENDPULSE_CLIENT_ID
20  SENDPULSE_CLIENT_SECRET
21EOF
22}
23 
24while [[ $# -gt 0 ]]; do
25  case "$1" in
26    --client-id)
27      CLIENT_ID="${2:-}"
28      shift 2
29      ;;
30    --client-secret)
31      CLIENT_SECRET="${2:-}"
32      shift 2
33      ;;
34    --base-url)
35      BASE_URL="${2:-}"
36      shift 2
37      ;;
38    --dry-run)
39      DRY_RUN=1
40      shift
41      ;;
42    -h|--help)
43      usage
44      exit 0
45      ;;
46    *)
47      echo "Unknown argument: $1" >&2
48      usage >&2
49      exit 1
50      ;;
51  esac
52done
53 
54if [[ -z "${CLIENT_ID}" || -z "${CLIENT_SECRET}" ]]; then
55  echo "Missing OAuth credentials. Pass --client-id/--client-secret or set SENDPULSE_CLIENT_ID and SENDPULSE_CLIENT_SECRET." >&2
56  exit 1
57fi
58 
59TOKEN_URL="${BASE_URL}/oauth/access_token"
60INFO_URL="${BASE_URL}/user/info"
61TOKEN_PAYLOAD=$(cat <<EOF
62{"grant_type":"client_credentials","client_id":"${CLIENT_ID}","client_secret":"${CLIENT_SECRET}"}
63EOF
64)
65 
66if [[ ${DRY_RUN} -eq 1 ]]; then
67  echo "[dry-run] POST ${TOKEN_URL}"
68  echo "[dry-run] payload: {\"grant_type\":\"client_credentials\",\"client_id\":\"<redacted>\",\"client_secret\":\"<redacted>\"}"
69  echo "[dry-run] then GET ${INFO_URL} with Authorization: Bearer <access_token>"
70  exit 0
71fi
72 
73TOKEN_RESPONSE=$(curl --silent --show-error --fail-with-body \
74  -X POST "${TOKEN_URL}" \
75  -H 'Accept: application/json' \
76  -H 'Content-Type: application/json' \
77  --data "${TOKEN_PAYLOAD}")
78 
79ACCESS_TOKEN=$(python3 - <<'PY' "${TOKEN_RESPONSE}"
80import json, sys
81payload = json.loads(sys.argv[1])
82token = payload.get("access_token")
83if not token:
84    raise SystemExit("No access_token in OAuth response")
85print(token)
86PY
87)
88 
89curl --silent --show-error --fail-with-body \
90  -H 'Accept: application/json' \
91  -H "Authorization: Bearer ${ACCESS_TOKEN}" \
92  "${INFO_URL}"
93