Copy #!/bin/bash
# Step 1: Check prerequisites
for cmd in jq openssl base64; do
if ! command -v "$cmd" >/dev/null 2>&1; then
echo "❌ Required command '$cmd' not found. Please install it and retry." >&2
exit 1
fi
done
# Step 2: Retrieve and validate NETOSECRET
if [ -z "$NETOSECRET" ]; then
echo "❌ Environment variable NETOSECRET is not set."
echo "To retrieve this value from the Fusion Portal, see:"
echo "https://docs.netography.com/reference/create-a-netography-api-key"
exit 1
fi
netosecret=$NETOSECRET
# Step 3: Decode the secret and extract fields using jq
decoded=$(echo "$netosecret" | base64 -d)
appname=$(echo "$decoded" | jq -r .appname)
appkey=$(echo "$decoded" | jq -r .appkey)
shortname=$(echo "$decoded" | jq -r .shortname)
sharedsecret=$(echo "$decoded" | jq -r .sharedsecret)
url=$(echo "$decoded" | jq -r .url)
# Step 4: Create JWT header and payload
header='{"alg":"HS256","typ":"JWT"}'
iat=$(date +%s)
jti=$((RANDOM * RANDOM))
payload=$(jq -nc \
--arg appname "$appname" \
--arg appkey "$appkey" \
--arg shortname "$shortname" \
--argjson iat "$iat" \
--argjson jti "$jti" \
'{iat:$iat,jti:$jti,appname:$appname,appkey:$appkey,shortname:$shortname}')
# Step 5: Define base64url encoding function
base64url() {
openssl base64 -A | tr '+/' '-_' | tr -d '='
}
# Step 6: Encode header and payload
header64=$(echo -n "$header" | base64url)
payload64=$(echo -n "$payload" | base64url)
# Step 7: Create JWT signature
signature=$(printf "%s.%s" "$header64" "$payload64" \
| openssl dgst -sha256 -hmac "$sharedsecret" -binary \
| base64url)
jwt="${header64}.${payload64}.${signature}"
# Step 8: Request bearer token
token_response=$(curl -s -X POST \
--url "${url}/auth/token" \
-H "accept: application/json" \
-H "content-type: application/json" \
-d "$(jq -nc --arg jwt "$jwt" '{jwt:$jwt}')")
# Step 9: Output bearer token from "access_token" field
access_token=$(echo "$token_response" | jq -r '.access_token // empty')
if [ -n "$access_token" ]; then
echo "$access_token"
else
echo "❌ access_token not found in response:"
echo "$token_response"
fi 
