This is a nodejs API for doing a password login into an Agave tenant. This is API is useful for client side logins in which you do not wish to have the client key information out there - so instead, the client app can utilize this API to login and get the auth and refresh tokens. This can be deployed on the same server that is running your application if desired as by default this runs on a different port than you web application (which is likely on 80 or 443)

To start use 'npm install' to install all dependencies.

Next replace the hosts, consumerKey, consumerSecret, whiteList and tenantUrl with your tenant's settings in the 'config.js' file. If you want to allow all users from the tenant to login without adding them to the list the your white_list var should look like ['*'] or have the * added as an item to your list. The hosts cannot be set to '*' as the header credentials is not permitted to work with '*', therefore you must specify a host or list of hosts in the config file.

Add files for your SSL key and cert named 'ca.crt' and 'ca.key'.

To start the server:

node server.js

To use the API you can POST to:

CURL -k -X POST --user username:passsword https://localhost:8000/login?

For AJAX be sure to use the auth header - for example for $http.post in angularjs:

var post_data = {};
var url = 'https://localhost:8000/login';
var options = {
    withCredentials: true,
    headers:{ 'Authorization':  'Basic ' + btoa(username + ":" + password)}
  }
$http.post(url,post_data, options)
  .success(function (data, status, headers, config)
    {
      //your code
    }
  )

NOTE You can also modify the port in the 'config.js' file to 443 at some point or another custom port if you desire.