Session signing on TwentyThree with Node, request and oauth-1.0a

session-signing.js

const request = require('request');
const crypto = require('crypto');
const OAuth = require('oauth-1.0a');

const domain = '<domain>';
const key = '<consumer_key>';
const secret = '<consumer_secret>';
const access_token = '<access_token>';
const access_secret = '<access_token_secret>';
const token = {
  key: access_token,
  secret: access_secret
};

const oauth = OAuth({
  consumer: { key, secret },
  signature_method: 'HMAC-SHA1',
  hash_function(base_string, key) {
    return crypto.createHmac('sha1', key).update(base_string).digest('base64');
  }
});

const request_data = {
  url: 'http://'+domain+'/api/session/get-token.json',
  method: 'GET',
  data: {}
};

request({
  url: request_data.url,
  method: request_data.method,
  form: request_data.data,
  headers: oauth.toHeader(oauth.authorize(request_data, token))
}, function(error, response, body) {

  var session_token = JSON.parse(body).sessiontoken.access_token;
  console.log("\nTo log in, Visit:\n  http://"+domain+"/api/session/redeem-token?session_token="+session_token+"\n\n");
});