Ruby Example of Ghost JWT Auth

README.md

Demo of generating a JWT and authenticating with Ghost's Admin API.

Usage:

• Save ghost-auth.rb locally
• gem install httparty jwt first
• With Ghost running on localhost:2368
• ruby ghost-auth.rb {admin api key} to run

Gotchas:

Designed to authenticate with a local install, change the line 18 if your Ghost install is elsewhere

ghost-auth.rb

require 'httparty'
require 'jwt'

api_key = ARGV[0]
kid, secret = api_key.split(':')

iat = Time.now.to_i

header = {alg: 'HS256', typ: 'JWT', kid: kid}
payload = {
    iat: iat,
    exp: iat + 5 * 3600,
    aud: '/v2/admin/'
}

token = JWT.encode payload, [secret].pack('H*'), 'HS256', header

url = 'http://localhost:2368/ghost/api/v2/admin/posts/?limit=1'
headers = {Authorization: "Ghost #{token}"}
puts HTTParty.get(url, headers: headers)