#### Repository
https://github.com/hapramp/steemconnect4j

## 1. Introduction

https://ipfs.busy.org/ipfs/QmXVGoj2vx4ojo98kLXxVeUioeJUjsEpCcBdUGWSyn3PHB

SteemConnect4j is a Java SDK for SteemConnect v2. To read more about it, check out the introduction blog - [Introducing SteemConnect4j](https://busy.org/@hapramp/introducing-steemconnect4j).

In this blog post, I will be discussing about the following improvements made in the project - 

- Improved Security using Refresh Tokens
- Increased coverage
- Other bug fixes

## 2. Improved Security using `Refresh Tokens`

`Refresh Tokens` are used to grant headless operations the access to carry out operations on behalf of the user. These tokens do not expire (in contrast; access tokens expire in 7 days) and can be used to generate new access tokens for the user.

It is required to have the `offline` `scope` in order to retrieve the refresh token.

### 2.1 Code Changes to Introduce `Refresh Tokens`

The route to get the access token is defined as a constant in the application - 

![carbon1.png](https://ipfs.busy.org/ipfs/QmXjeKwRz2D7QuWJKyoKRVKsv4MvvuptBhzaSQQJ9mn7Rz)

Now the `getLoginUrl(boolean wantCode)` is refactored to contain a boolean parameter.
This parameter decides whether the returing url after successfull login will contain 
a `UserCode` or `AccessToken`.
So, developer now can decide the user security through this parameter.

![carbon2.png](https://ipfs.busy.org/ipfs/QmZRZg617o1SMwXv9BQPmwyjZxRmtePG733V8iQPBetwV9)

Getting an `AccessToken` is a three step process

`Get Code` -> `Get RefreshToken` -> `Get AccessToken`

> Note:Code is returned when user logs in if `getLoginUrl(true)` is used for logging in.


Methods to get/set client secret were added to [`SteemConnectOptions`](https://github.com/hapramp/steemconnect4j/blob/master/steemconnect4j/src/main/java/com/hapramp/steemconnect4j/SteemConnectOptions.java) class - 

![carbon3.png](https://ipfs.busy.org/ipfs/QmeCwpfqCmq6WLk6yRjQgPpurfvTw4AjZa688CBzjHX1zG)

Finally, methods to get refresh token and get access token from refresh token were added to complete the integration - 

![carbon4.png](https://ipfs.busy.org/ipfs/QmQgpNqHixT3EFVCoN8FNTUdF3dBD8FtuxgNyg5Wz7EGQi)

### 3. Increased Coverage

We have been working on improving the coverage for the SDK and we're happy to inform that the coverage is now at a decent level.

#### 3.1. Coverage Chart

![coverage-chart.png](https://ipfs.busy.org/ipfs/QmRBGcoqcAZHvZLrJcfEYk3DweHzuSzXSZAFLLvNYnevhp)

#### 3.2. Sunburst

Here is the sunburst from [Codecov](https://codecov.io/) - 

![Screenshot from 2018-07-03 15-22-39.png](https://ipfs.busy.org/ipfs/QmXsGUfrbs8ZAUF4CVGsLoQvamBBsie63fVQBaADD17SyY)

You can see the detailed coverage report at https://codecov.io/gh/hapramp/steemconnect4j.

## 4. Other Bug Fixes

Several bugs were fixed for the SDK and it is now being tested in the HapRamp Android application. As we move forward with integrating more parts of the SDK into the application, we will be discovering and resolving more bugs that pop up.

#### Pull Requests

| Link | Description |
|----------|---- |
| [hapramp/steemconnect4j#18](https://github.com/hapramp/steemconnect4j/pull/18) | Adding support for refresh tokens |
| [hapramp/steemconnect4j#20](https://github.com/hapramp/steemconnect4j/pull/20) | Adding usage documentation for refresh tokens |
| [hapramp/steemconnect4j#21](https://github.com/hapramp/steemconnect4j/pull/21) and [hapramp/steemconnect4j#16](https://github.com/hapramp/steemconnect4j/pull/16) | Adding test cases |

#### Github Account

https://github.com/bxute

----

###### Join the conversation on Discord - https://discord.gg/r9vwcHe.