Tutorial

# frozen_string_literal: true
module Genko  PER_PAGE = 10
  Page = Data.define(:contents, :total_count, :total_pages, :number) do    def previous = number > 1 ? number - 1 : nil    def next = number < total_pages ? number + 1 : nil  end
  def self.page(number, per_page: PER_PAGE)    list = get("/blog", limit: per_page, offset: (number - 1) * per_page, orders: "-publishedAt")
    Page.new(      contents: list[:contents],      total_count: list[:totalCount],      total_pages: [1, (list[:totalCount].to_f / per_page).ceil].max,      number: number    )  endend

number = [params[:page].to_i, 1].maxpage = Genko.page(number)

<nav aria-label="Pagination">  <% if page.previous %>    <%= link_to "Previous page", blog_index_path(page: page.previous), rel: "prev" %>  <% end %>  <span><%= page.number %> / <%= page.total_pages %></span>  <% if page.next %>    <%= link_to "Next page", blog_index_path(page: page.next), rel: "next" %>  <% end %></nav>

def self.all_entries(endpoint, **queries)  offset = 0  entries = []
  loop do    list = get("/#{endpoint}", **queries, limit: 100, offset: offset)    entries.concat(list[:contents])    offset += 100    break if offset >= list[:totalCount]  end
  entriesend

class BlogController < ApplicationController  def show    draft_key = params[:draftKey].presence
    entry = Genko.get("/blog/#{ERB::Util.url_encode(params[:id])}", draftKey: draft_key)    @post = Post.from_entry(entry)
    return unless draft_key
    # Keep previews out of search indexes and referrer headers.    response.headers["X-Robots-Tag"] = "noindex, nofollow"    response.headers["Referrer-Policy"] = "no-referrer"    response.headers["Cache-Control"] = "private, no-store"  rescue Genko::ApiError => e    raise unless e.status == 404
    head :not_found  endend

https://your-site.example/blog/{id}?draftKey={key}

# frozen_string_literal: true
require "openssl"
module Genko  module Webhook    # genko.me sends `sha256=` followed by the hexadecimal HMAC-SHA256 of `timestamp.rawBody`.    def self.valid_signature?(secret, raw_body, timestamp, signature_header)      return false unless timestamp&.match?(/\A(0|[1-9][0-9]*)\z/)      return false if (Time.now.to_i - timestamp.to_i).abs > 300      return false if signature_header.nil?
      expected = "sha256=#{OpenSSL::HMAC.hexdigest('SHA256', secret, "#{timestamp}.#{raw_body}")}"      # secure_compare prevents timing attacks. Do not compare with ==.      OpenSSL.secure_compare(expected, signature_header)    end  endend

require "json"require "sinatra/base"require_relative "lib/genko/webhook"
class GenkoWebhook < Sinatra::Base  post "/genko-webhook" do    secret = ENV.fetch("GENKO_WEBHOOK_SECRET")    raw_body = request.body.read    timestamp = request.env["HTTP_X_GENKO_TIMESTAMP"]    signature = request.env["HTTP_X_GENKO_SIGNATURE"]
    halt 401, "Invalid signature" unless Genko::Webhook.valid_signature?(secret, raw_body, timestamp, signature)
    payload = JSON.parse(raw_body, symbolize_names: true)    entry_id = payload.dig(:entry, :id) # entry is nil for a test delivery    logger.info("[genko] #{payload[:event]} #{entry_id || '(none)'}")
    # Clear the cache or enqueue a rebuild here.    content_type :json    { received: true }.to_json  endend

class GenkoWebhooksController < ActionController::API  def create    secret = Rails.application.credentials.genko_webhook_secret    valid = Genko::Webhook.valid_signature?(      secret, request.raw_post, request.headers["X-Genko-Timestamp"], request.headers["X-Genko-Signature"]    )    return head :unauthorized unless valid
    payload = JSON.parse(request.raw_post, symbolize_names: true)    # Hand slow work to a job and return from the receiver promptly.    GenkoRefreshJob.perform_later(payload[:api], payload.dig(:entry, :id))
    render json: { received: true }  endend