Panduan Integrasi SSO Aizu Sphere

// app.js — Express SSO integration
const express = require('express');
const axios = require('axios');
const crypto = require('crypto');
const session = require('express-session');

const app = express();
app.use(session({ secret: 'your-secret', resave: false, saveUninitialized: true }));

const AIZU_API_TOKEN = 'YOUR_API_TOKEN';
const CALLBACK_URL = 'https://myapp.com/auth/callback';

// Tombol login — redirect ke Aizu SSO
app.get('/auth/login', (req, res) => {
    const state = crypto.randomBytes(16).toString('hex');
    req.session.sso_state = state;

    const params = new URLSearchParams({
        api_token: AIZU_API_TOKEN,
        return: CALLBACK_URL,
        state: state,
    });

    res.redirect(`https://aaizu.net/sso/?${params}`);
});

// Callback — verifikasi token
app.get('/auth/callback', async (req, res) => {
    const { token, state } = req.query;

    if (!token) return res.status(400).send('Token tidak ditemukan');
    if (state !== req.session.sso_state) return res.status(403).send('CSRF detected');
    delete req.session.sso_state;

    try {
        const { data } = await axios.get('https://aaizu.net/api/', {
            params: { action: 'verify_sso', token }
        });

        if (data.status !== 'success') {
            return res.status(401).send(data.message);
        }

        // Simpan ke session
        req.session.user = {
            user_id: data.user_id,
            username: data.username,
            role: data.role,
            nama: data.nama,
            email: data.email,
        };

        res.redirect('/dashboard');
    } catch (err) {
        res.status(500).send('Gagal verifikasi SSO');
    }
});

app.listen(3000);

# app.py — Flask SSO integration
from flask import Flask, redirect, request, session, jsonify
import requests, secrets

app = Flask(__name__)
app.secret_key = 'your-secret-key'

AIZU_API_TOKEN = 'YOUR_API_TOKEN'
CALLBACK_URL = 'https://myapp.com/auth/callback'

# Tombol login — redirect ke Aizu SSO
@app.route('/auth/login')
def sso_login():
    state = secrets.token_hex(16)
    session['sso_state'] = state

    params = {
        'api_token': AIZU_API_TOKEN,
        'return': CALLBACK_URL,
        'state': state,
    }
    query = '&'.join(f'{k}={v}' for k, v in params.items())
    return redirect(f'https://aaizu.net/sso/?{query}')

# Callback — verifikasi token
@app.route('/auth/callback')
def sso_callback():
    token = request.args.get('token')
    state = request.args.get('state')

    if not token:
        return 'Token tidak ditemukan', 400
    if state != session.pop('sso_state', None):
        return 'CSRF detected', 403

    # Verifikasi token ke API Aizu
    resp = requests.get('https://aaizu.net/api/', params={
        'action': 'verify_sso',
        'token': token,
    }, timeout=10)

    data = resp.json()
    if data.get('status') != 'success':
        return data.get('message', 'Login gagal'), 401

    # Simpan ke session
    session['user'] = {
        'user_id': data['user_id'],
        'username': data['username'],
        'role': data['role'],
        'nama': data['nama'],
        'email': data['email'],
    }

    return redirect('/dashboard')

if __name__ == '__main__':
    app.run(port=3000)

<!-- Tombol Login dengan Aizu -->
<button id="aizu-login" style="
    background: linear-gradient(135deg, #8b5cf6, #3b82f6);
    color: white;
    border: none;
    padding: 12px 24px;
    border-radius: 12px;
    font-weight: 700;
    cursor: pointer;
    display: flex;
    align-items: center;
    gap: 8px;
">
    <img src="https://aaizu.net/icon.jpg"
         width="24" height="24"
         style="border-radius: 6px;">
    Login dengan Aizu Sphere
</button>

<script>
document.getElementById('aizu-login').addEventListener('click', () => {
    const API_TOKEN = 'YOUR_API_TOKEN';
    const CALLBACK = 'https://myapp.com/sso-callback.php';
    const STATE = Math.random().toString(36).substring(2);

    // Simpan state di localStorage untuk verifikasi nanti
    localStorage.setItem('sso_state', STATE);

    // Redirect ke Aizu SSO
    window.location.href = `https://aaizu.net/sso/?api_token=${API_TOKEN}&return=${encodeURIComponent(CALLBACK)}&state=${STATE}`;
});
</script>