Implementing two Websites User Auth, as Master-Slave duo, using your SSO for authentification in Slave?

[jasny]

Implementing two Websites User Auth, as Master-Slave duo, using your SSO for authentification in Slave?

[jasny]

Either make master the SSO server and the slave an SSO broker, or move the authentication to a separate project which is the SSO server and make both an SSO broker. The first option is probably the best in your case.

When you create start a session, make sure to store the client IP address as 'client_addr'.

Next extend SsoServer and implement the abstract methods. You can use it as controller, so route /sso to it, or copy index.php from the server example.

Since you only have one broker you can implement getBrokerInfo as

protected function getBrokerInfo($broker) {
   if ($broker !== 'foo_webchat') return;
   return ['id' => 'foo_webchat', 'secret' => 'randomstring'];
}

The other methods should be self explanatory.

Next try running a demo broker as

export SSO_SERVER=http://www.your-website-here.com/sso SSO_BROKER_ID=foo_webchat SSO_BROKER_SECRET=randomstring; php -S localhost:9001 -t examples/broker/

Now you should be able to log into your website via http://localhost:9001 and get the user info. Also when you're already logged into your website, you should see the user info directly (without have to login again).

If you have more questions, please use http://www.stackoverflow.com