node-jwt-sso

Example code for JWT SSO with Node.js for your Website Toolbox forum.

Usage

Install the dependency:

npm install jsonwebtoken

const jwt = require('jsonwebtoken');

const CLIENT_SECRET = 'YOUR_CLIENT_SECRET'; // From Integrate > Single Sign On
const CLIENT_ISSUER_ID = 'YOUR_CLIENT_ISSUER_ID'; // From Integrate > Single Sign On
const FORUM_DOMAIN = 'YOUR_FORUM_DOMAIN'; // e.g. forum.example.com

function createSsoUrl(user, jump) {
    const token = jwt.sign(
        {
            email: user.email,    // Required
            username: user.username, // Optional
            name: user.name,     // Optional
        },
        CLIENT_SECRET,
        {
            algorithm: 'HS256',
            issuer: CLIENT_ISSUER_ID,
            expiresIn: '5m', // Short expiry — only needs to survive the redirect
        }
    );

    let url = `https://${FORUM_DOMAIN}/oauth?action=doOauthCallback&service=JWT&code=${encodeURIComponent(token)}`;
    if (jump) {
        url += `&jump=${encodeURIComponent(jump)}`;
    }
    return url;
}

// Redirect the logged-in user to the forum:
res.redirect(createSsoUrl({ email: 'jane@example.com', username: 'jane', name: 'Jane Doe' }));

// Redirect to a specific page after login (using the optional jump parameter):
res.redirect(createSsoUrl({ email: 'jane@example.com', username: 'jane', name: 'Jane Doe' }, `https://${FORUM_DOMAIN}/categories`));

For more details, see the JWT SSO support article.