# Authorization Service

The authorization service provides API that allows to add and retrieve authorization data for GPII App installations.
GPII App Installations are authorized using [Resource Owner GPII key
Grant](https://wiki.gpii.net/w/GPII_OAuth_2_Guide#Resource_Owner_GPII_Key_Grant).

* [getInfoByAccessToken(accessToken)](#getinfobyaccesstokenaccesstoken)
* [grantGpiiAppInstallationAuthorization(gpiiKey, clientId,
  clientCredentialId)](#grantgpiiappinstallationauthorizationgpiikey-clientid-clientcredentialid)

## getInfoByAccessToken(accessToken)

* **description**: Get the authorization information that is associated with the access token.
* **parameters:**
  * accessToken: String. A string representing an authorization issued to the client.
* **return: (one of the below)**
  * An object. For GPII app installation clients, the object contains: the access token that matches the given
    parameter, the client and authorization data. An example:
    ```json
    {
        "accessToken": "gpii-app-installation-accessToken-1",
        "clientCredential": {
            "type": "clientCredential",
            "schemaVersion": "0.2",
            "clientId": "gpiiAppInstallationClient-1",
            "oauth2ClientId": "net.gpii.ajc.bakersfield",
            "oauth2ClientSecret": "client_secret_ajc_bakersfield",
            "allowedIPBlocks": null,
            "allowedPrefsToWrite": null,
            "isCreateGpiiKeyAllowed": false,
            "isCreatePrefsSafeAllowed": false,
            "revoked": false,
            "revokedReason": null,
            "timestampCreated": "2017-11-21T18:11:22.101Z",
            "timestampRevoked": null,
            "id": "clientCredential-1"
        },
        "authorization": {
            "type": "gpiiAppInstallationAuthorization",
            "schemaVersion": "0.2",
            "clientId": "gpiiAppInstallationClient-1",
            "gpiiKey": "chrome_high_contrast",
            "accessToken": "gpii-app-installation-accessToken-1",
            "revoked": false,
            "revokedReason": null,
            "timestampCreated": "2017-05-29T17:54:00.000Z",
            "timestampRevoked": null,
            "timestampExpires": "3020-05-30T17:54:00.000Z",
            "id": "gpiiAppInstallationAuthorization-1"
        }
    }
    ```
    * `undefined`. `undefined` is returned in any of these cases:
      * The authorization that matches the given access token is not found;
      * The authorization has been revoked.

## grantGpiiAppInstallationAuthorization(gpiiKey, clientId, clientCredentialId)

* **description**: Grant an authorization to a GPII app installation. The authorization allows a GPII app installation
 to access user preferences associated with the given GPII key. A new authorization will always be generated and
 returned regardless whether the previous authorization assigned for the same gpiiKey + clientId combination has
 expired.
* **parameters:**
  * gpiiKey: String. A GPII key that associates with user preferences.
  * clientId: String. A system generated unique string that identifies the client.
  * clientCredentialId: String. A system generated unique string that identifies the valid client credential of this
    client with clientId.
* **return:** Object. Contains an access token and the number of seconds that the access token will expire. For example:

```json
{
    "accessToken": "8ea3457bf283db5d34ea5a4079fa36b2",
    "expiresIn": 3600
}
```

Return an object that contains the error message and HTTP status code if,

* The GPII key is not found, or,
* The client is not a GPII App Installation Client.