Single Sign-On

{
	"userID":"uniqueId_12345678923",
	"email":"testsso@test.co",
	"admin":"false",
	"name":"pubblesso",
	"avatar":"http://png-1.findicons.com/files/icons/1072/face_avatars/300/i04.png",
	"userURL":"http://ssotest.com/",
	"jobTitle":"CEO of Widgets Co.",
	"emailNotification": "false"
}

String PUBBLE_SSO_KEY =  "Your_SSO_key";

// Step 1. User data, replace values with authenticated user data
HashMap<String, String> message = new HashMap<String, String>();
//your userid in your system
message.put("userID","uniqueId_12345678923");
message.put("name","test sso");
// User email address
message.put("email","testsso@pubble.co");
// User avatar URL (optional)
message.put("avatar","http://png-1.findicons.com/face_avatars/300/i04.png");
// User website or profile URL (optional)
message.put("userURL","http://test.com/");
message.put("admin", "false");
message.put("jobTitle", "CEO of Widgets co.");

// Step 2. Get the timestamp
long timestamp = System.currentTimeMillis();


// Step 3. Encode user data
ObjectMapper mapper = new ObjectMapper();
String jsonMessage = mapper.writeValueAsString(message);
String base64EncodedStr = new String(Base64.encodeBase64(jsonMessage.getBytes()));

// Step 4. Generate signature
String signature = "";

try {
   	signature = calculateRFC2104HMAC(base64EncodedStr + " " + timestamp, PUBBLE_SSO_KEY);
   	// Step 5. Print out the SSO message
   	System.out.println(base64EncodedStr + " " + signature + " " + timestamp);
} catch (Exception e) {
	e.printStackTrace();
}

// Step 1. import crypto
var crypto = require('crypto');

// Step 2. User data, replace values with authenticated user data
var user = {
	"userID":"uniqueId_12345678923",
	"name":"test sso",
	"email":"testsso@pubble.co",
	"avatar":"http://png-1.findicons.com/face_avatars/300/i04.png",
	"userURL":"http://test.com/",
	"admin":"false",
	"jobTitle":"CEO of Widgets co."
}

// Step 3. Get the timestamp
let timestamp = new Date().getTime();

// Step 4. Encode user data
let base64EncodedStr = nodeBase64.encode(JSON.stringify(user));

// Step 5. Generate signature
var signature = crypto.createHmac('SHA256', "YOUR_SSO_SECURITY_KEY").update(base64EncodedStr + ' ' + timestamp).digest('hex');

// Step 6. Generate SSO message token
var token = base64EncodedStr + ' ' + signature + ' ' + timestamp;

/**
* JSON ENCODE
* Checks if json_encode is not available and defines json_encode
* to use php_json_encode instead
*/

function cf_json_encode($data) {
	return cfjson_encode($data);
}

function cfjson_encode_string($str) {
	if(is_bool($str)) {
		return $str ? 'true' : 'false';
	}
	return str_replace(
		array('"', '/', "\n", "\r"),
		array('\"', '\/', '\n', '\r'),
		$str);
}

function cfjson_encode($arr) {
	$json_str = '';
	if (is_array($arr)) {
		$pure_array = true;
		$array_length = count($arr);
		for ( $i = 0; $i < $array_length ; $i++) {
			if (!isset($arr[$i])) {
				$pure_array = false;
				break;
			}
		}
		if ($pure_array) {
			$json_str = '[';
			$temp = array();
			for ($i=0; $i < $array_length; $i++) {
				$temp[] = sprintf("%s", cfjson_encode($arr[$i]));
			}
			$json_str .= implode(',', $temp);
			$json_str .="]";
		}
		else {
			$json_str = '{';
			$temp = array();
			foreach ($arr as $key => $value) {
				$temp[] = sprintf("\"%s\":%s", $key, cfjson_encode($value));
			}
			$json_str .= implode(',', $temp);
			$json_str .= '}';
		}
	}
	else if (is_object($arr)) {
		$json_str = '{';
		$temp = array();
		foreach ($arr as $k => $v) {
			$temp[] = '"'.$k.'":'.cfjson_encode($v);
		}
		$json_str .= implode(',', $temp);
		$json_str .= '}';
	}
	else if (is_string($arr)) {
		$json_str = '"'. cfjson_encode_string($arr) . '"';
	}
	else if (is_numeric($arr)) {
		$json_str = $arr;
	}
	else if (is_bool($arr)) {
		$json_str = $arr ? 'true' : 'false';
	}
	else {
		$json_str = '"'. cfjson_encode_string($arr) . '"';
	}
	return $json_str;
}

}

/**
* JSON ENCODE
*/
/* pb_sso function is used to generate pubble sso information*/

function pb_sso() {
	$key = "Your_key"; // your pubble SSO key
	global $current_user;
	get_currentuserinfo(); // Get current user data from your system.
	if ($current_user->ID) {
		$avatar_tag = get_avatar($current_user->ID);
		$avatar_data = array();
		preg_match('/(src)=((\'|")[^(\'|")]*(\'|"))/i', $avatar_tag, $avatar_data);
		$avatar = str_replace(array('"', "'"), '', $avatar_data[2]);
		if (current_user_can('manage_options')) {

			$user_data = array(
				'name' => $current_user->display_name,
				'userID' => $current_user->ID,
				'avatar' => $avatar,
				'email' => $current_user->user_email,
				'userURL' => $current_user->user_url,
				'admin' => "false");
		}
		else {
			// For normal user, no need to set admin field.
			$user_data = array(
				'name' => $current_user->display_name,
				'userID' => $current_user->ID,
				'avatar' => $avatar,
				'email' => $current_user->user_email,
				'userURL' => $current_user->user_url,
			);
		}
	}
	else {
		$user_data = array();
	}


	// Get the timestamp
	$time = time();

	// Encode user data
	$user_data = base64_encode(cf_json_encode($user_data));

	// Encrypt user info with timestamp and pubble_key
	$hmac = pb_hmacsha1($user_data.' '.$time, $key);

	// Generate final SSO signature
	$payload = $user_data.' '.$hmac.' '.$time;
	return array('remote_auth_s2'=>$payload);
}

function pb_hmacsha1($data, $key) {
	$blocksize=64;
	$hashfunc='sha1';
	if (strlen($key)>$blocksize)
	$key=pack('H*', $hashfunc($key));
	$key=str_pad($key,$blocksize,chr(0x00));
	$ipad=str_repeat(chr(0x36),$blocksize);
	$opad=str_repeat(chr(0x5c),$blocksize);
	$hmac = pack(
		'H*',$hashfunc(
			($key^$opad).pack(
				'H*',$hashfunc(
					($key^$ipad).$data
					)
				)
			)
	);
	return bin2hex($hmac);
}

{
	"userID":"uniqueId_12345678923"
}

{
	code: 200,
	status: "ok"
}