login
Lightweight SSO Login System
Convention
- Redirect to
login.changkun.de?redirect=origin
- When login success,
login.changkun.de
will redirect to origin with query parametertoken=xxx
- A service provider should do:
- Post the token to
login.changkun.de/verify
to verify if the token is a valid token or not. If the token is not valid, do nothing. - If the token is valid, then authentication success, and set cookie to the user.
- Later request to the service provider will have the cookie with the token, each time should verify the token is valid or not internally. If valid, authorize success. If not, redirect to
login.changkun.de?redir=origin
.
- Post the token to
Test page
/test
License
Copyright (c) 2021 Changkun Ou. All Rights Reserved. Unauthorized using, copying, modifying and distributing,via any medium is strictly prohibited.