📖 Developer Documentation

GET https://skunk.to/oauth/authorize?
    response_type=code
    &client_id=YOUR_CLIENT_ID
    &redirect_uri=https://yourapp.com/callback
    &scope=openid profile:read
    &state=RANDOM_STATE_STRING

https://yourapp.com/callback?code=AUTH_CODE&state=RANDOM_STATE_STRING

POST /oauth/token
Content-Type: application/x-www-form-urlencoded

grant_type=authorization_code
&code=AUTH_CODE
&redirect_uri=https://yourapp.com/callback
&client_id=YOUR_CLIENT_ID
&client_secret=YOUR_CLIENT_SECRET

{
    "access_token": "eyJhbGciOiJIUzI1NiIs...",
    "token_type": "Bearer",
    "expires_in": 3600,
    "refresh_token": "dGhpcyBpcyBhIHJlZnJl...",
    "scope": "openid profile:read"
}

GET https://skunk.to/oauth/userinfo
Authorization: Bearer ACCESS_TOKEN

POST /oauth/token
Content-Type: application/x-www-form-urlencoded

grant_type=refresh_token
&refresh_token=YOUR_REFRESH_TOKEN
&client_id=YOUR_CLIENT_ID
&client_secret=YOUR_CLIENT_SECRET

// JavaScript example
function generateCodeVerifier() {
    const array = new Uint8Array(32);
    crypto.getRandomValues(array);
    return btoa(String.fromCharCode(...array))
        .replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
}

async function generateCodeChallenge(verifier) {
    const encoder = new TextEncoder();
    const data = encoder.encode(verifier);
    const digest = await crypto.subtle.digest('SHA-256', data);
    return btoa(String.fromCharCode(...new Uint8Array(digest)))
        .replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
}

const codeVerifier = generateCodeVerifier();
const codeChallenge = await generateCodeChallenge(codeVerifier);

// Store codeVerifier securely (e.g., sessionStorage)
// Include codeChallenge in authorization request

&code_challenge=CODE_CHALLENGE
&code_challenge_method=S256

&code_verifier=CODE_VERIFIER

<!-- HTML -->
<a href="https://skunk.to/oauth/authorize?
    response_type=code
    &client_id=YOUR_CLIENT_ID
    &redirect_uri=https://yourapp.com/callback
    &scope=openid profile:read
    &state=RANDOM_STATE"
   class="skunk-login-btn">
    🦨 Login with skunk.to
</a>

<!-- CSS -->
<style>
.skunk-login-btn {
    display: inline-flex;
    align-items: center;
    gap: 0.5rem;
    background: linear-gradient(135deg, #7c3aed, #a855f7);
    color: white;
    padding: 0.75rem 1.5rem;
    border-radius: 8px;
    font-weight: 600;
    text-decoration: none;
    font-family: system-ui, sans-serif;
}
.skunk-login-btn:hover { opacity: 0.9; }
</style>

Authorization: Bearer sk_live_xxxx_xxxxxxxxxxxxxxxx

GET https://skunk.to/api/upload?api_key=sk_live_xxxx_xxxxxxxxxxxxxxxx

{
    "sub": "user_abc123",
    "name": "johndoe",
    "preferred_username": "johndoe",
    "picture": null,
    "updated_at": 1704067200
}

curl -X POST "https://skunk.to/api/upload" \
    -H "Authorization: Bearer YOUR_API_KEY" \
    -F "file=@/path/to/file.png"

{
    "success": true,
    "id": "abc123",
    "url": "https://skunk.to/abc123",
    "raw_url": "https://skunk.to/abc123/raw",
    "deletion_key": "del_xyz789",
    "deletion_url": "https://skunk.to/abc123?delete=del_xyz789"
}

curl -X POST "https://skunk.to/api/paste" \
    -H "Authorization: Bearer YOUR_API_KEY" \
    -H "Content-Type: application/json" \
    -d '{
        "content": "console.log(\"Hello World\");",
        "syntax": "javascript",
        "title": "My Code Snippet"
    }'

{
    "success": true,
    "id": "paste123",
    "url": "https://skunk.to/p/paste123",
    "raw_url": "https://skunk.to/p/paste123/raw",
    "deletion_key": "del_abc456",
    "deletion_url": "https://skunk.to/p/paste123?delete=del_abc456"
}

import requests
from urllib.parse import urlencode

CLIENT_ID = "sk_your_client_id"
CLIENT_SECRET = "sks_your_client_secret"
REDIRECT_URI = "https://yourapp.com/callback"

# Step 1: Generate authorization URL
auth_params = {
    "response_type": "code",
    "client_id": CLIENT_ID,
    "redirect_uri": REDIRECT_URI,
    "scope": "openid profile:read",
    "state": "random_state_string"
}
auth_url = f"https://skunk.to/oauth/authorize?{urlencode(auth_params)}"
print(f"Redirect user to: {auth_url}")

# Step 2: Exchange code for tokens (in your callback handler)
def exchange_code(code):
    response = requests.post("https://skunk.to/oauth/token", data={
        "grant_type": "authorization_code",
        "code": code,
        "redirect_uri": REDIRECT_URI,
        "client_id": CLIENT_ID,
        "client_secret": CLIENT_SECRET
    })
    return response.json()

# Step 3: Get user info
def get_user_info(access_token):
    response = requests.get("https://skunk.to/oauth/userinfo", headers={
        "Authorization": f"Bearer {access_token}"
    })
    return response.json()

const API_KEY = 'sk_live_xxxx_xxxxxxxxxxxxxxxx';

async function uploadFile(file) {
    const formData = new FormData();
    formData.append('file', file);

    const response = await fetch('https://skunk.to/api/upload', {
        method: 'POST',
        headers: {
            'Authorization': `Bearer ${API_KEY}`
        },
        body: formData
    });

    return response.json();
}

// Usage
const fileInput = document.querySelector('input[type="file"]');
fileInput.addEventListener('change', async (e) => {
    const result = await uploadFile(e.target.files[0]);
    console.log('Uploaded:', result.url);
});

curl -X POST "https://skunk.to/api/paste" \
    -H "Authorization: Bearer sk_live_xxxx_xxxxxxxxxxxxxxxx" \
    -H "Content-Type: application/json" \
    -d '{
        "content": "Hello, World!",
        "syntax": "plaintext",
        "title": "My First Paste"
    }'

{
    "error": "invalid_grant",
    "error_description": "Authorization code has expired"
}

{
    "success": false,
    "error": "Invalid API key"
}