[SOLVED!] HTTP Basic Authentication (Or OAuth) / Rate Limiting with GitHub's API

repoName = "GitByte"

json = (loadfile "CraftedCart/api/jsonParser.lua")()

local files = {}
local dirs = {}

local function getDir(path)
  web = http.get("https://api.github.com/repos/twbs/bootstrap/contents" .. path)
  data = json:decode(web.readAll())

  for k, v in pairs(data) do
	if v["type"] == "dir" then
	  table.insert(dirs, v["path"])
	  print("Found Dir: " .. v["path"]) --TESTING
	  getDir("/" .. v["path"])
	elseif v["type"] == "file" then

	  table.insert(files, {v["name"], v["download_url"], "Downloads/" .. repoName .. "/" .. v["path"]})
	  print("Found File: " .. v["path"]) --TESTING
	end
  end
end

getDir("")

for k, v in pairs(dirs) do
  fs.makeDir(v)
end

os.loadAPI("CraftedCart/api/downloader.lua")
downloader = _G["downloader.lua"]
downloader.getAndInstall(files, 4)

minizbot2012, on 04 October 2015 - 02:28 PM said:

Okay as seeing I've implemented it before I might be of some help. (the Gist API)

Basic authorization is basically taking a username and password, adding a colon (format "user:pass") between them and then using base64, then you add the string "Basic " before the encoded string, and yes that space is important. Github's API takes that string generated by the header named "Authorization". Be warned that when doing this security is important for the generated strings, as there is nothing stopping you from decoding the user+password from the string token. I did it as a mere experiment.

The reference I used in creating the gist API:

https://en.wikipedia..._authentication

Also note that to use Github's API is must use https otherwise it won't work.

A base 64 implementation (encoding only):

local function enc(data)
	return ((data:gsub('.', function(x)
		local r,b='',x:byte()
		for i=8,1,-1 do r=r..(b%2^i-b%2^(i-1)>0 and '1' or '0') end
		return r;
	end)..'0000'):gsub('%d%d%d?%d?%d?%d?', function(x)
		if (#x < 6) then return '' end
		local c=0
		for i=1,6 do c=c+(x:sub(i,i)=='1' and 2^(6-i) or 0) end
		return b:sub(c+1,c+1)
	end)..({ '', '==', '=' })[#data%3+1])
end

generating a token:

local function genToken(user, pass)
	local userp = user..":"..pass
	return "Basic "..enc(userp)
end

return b:sub(c+1,c+1)

os.loadAPI("b64")

args = {...}

local function genToken(user, pass)
	local userp = user..":"..pass
	return "Basic "..b64.encode(userp) --Modified to use someone else's base64
end

print(args[1])
print(args[2])

token = genToken(args[1], args[2])
print(token)

web = http.post("https://api.github.com/rate_limit", nil, {["Authorization"] = token})
print(tostring(web))