Mini-App Integration Guide

Step 1 Register Your Domain

Contact Hub admin to add your domain to the SSO allowed domains list.

Step 2 Implement Both Authentication Methods

Method 1: SSO Authentication

// SSO login function
function startSSO() {
    const redirectUri = encodeURIComponent('https://your-app.com/api/auth/callback');
    const ssoUrl = `https://hub.regardingwork.com/api/auth/sso/authorize?redirect_uri=${redirectUri}&service=your-app`;
    window.location.href = ssoUrl;
}
                    

Method 2: Direct Password Grant

// Direct login function
async function loginDirect(event) {
    event.preventDefault();
    const formData = new FormData(event.target);
    
    try {
        const response = await fetch('https://hub.regardingwork.com/api/auth/login', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
            },
            body: JSON.stringify({
                username: formData.get('username'),
                password: formData.get('password')
            })
        });
        
        const result = await response.json();
        
        if (result.access_token) {
            // Store tokens
            sessionStorage.setItem('access_token', result.access_token);
            sessionStorage.setItem('refresh_token', result.refresh_token);
            
            // Redirect to dashboard
            window.location.href = '/dashboard';
        } else {
            alert('Login failed: ' + result.error);
        }
    } catch (error) {
        alert('Login error: ' + error.message);
    }
}
                    

Step 3 Handle SSO Callback

Create an endpoint to receive the token from Hub:

// SSO callback endpoint: /api/auth/callback
app.get('/api/auth/callback', (req, res) => {
    const token = req.query.token;
    
    if (!token) {
        return res.redirect('/login?error=no_token');
    }
    
    // Store token in session/cookie
    res.cookie('auth_token', token, { 
        httpOnly: true, 
        secure: true, 
        sameSite: 'strict' 
    });
    
    // Redirect to dashboard
    res.redirect('/dashboard');
});
                    

Step 4 Validate Tokens

For protected API calls, validate tokens with Hub:

// Token validation middleware
async function validateToken(req, res, next) {
    const token = req.cookies.auth_token || req.headers.authorization?.replace('Bearer ', '');
    
    if (!token) {
        return res.status(401).json({ error: 'No token provided' });
    }
    
    try {
        const response = await fetch('https://hub.regardingwork.com/api/auth/validate', {
            headers: {
                'Authorization': `Bearer ${token}`
            }
        });
        
        const result = await response.json();
        
        if (!result.valid) {
            return res.status(401).json({ error: 'Invalid token' });
        }
        
        req.user = result.user;
        next();
    } catch (error) {
        return res.status(500).json({ error: 'Token validation failed' });
    }
}
                    

Step 5 Implement Logout

Clear tokens and optionally redirect to Hub logout:

// Logout endpoint
app.post('/api/auth/logout', (req, res) => {
    // Clear local token
    res.clearCookie('auth_token');
    
    // Optional: Redirect to Hub logout for complete SSO logout
    const logoutUrl = 'https://hub.regardingwork.com/logout';
    res.json({ redirect: logoutUrl });
});