シングルサインオンまたはシングルサインアップをWebsite Toolboxフォーラムと統合しようとしている場合は、 SSO ライブラリ。これには、必要なすべてのライブラリコードを含む1つのファイルと、使用例を含む他のファイルが含まれています。

<?php /* Example parameters are given below. Replace these with the actual parameters for the URL. */ /* For Login Integration */ /* ------------------------------------------------------------------ */ $user['apikey'] = "APIKEY"; $user['user'] = "USERNAME"; // You can also login using an email address. For example: $user['user'] = 'john@gmail.com'; $user['email'] = 'john@gmail.com'; // You can also pass the user's email address (optional). It will automatically create the forum account in cases where the specified forum account doesn't already exist. // You can also pass the plain-text password (Optional) to set the account's password in cases where a new account needs to be created because it doesn't already exist. // If you choose not to pass the plain-text password with your request and a new account needs to be created, it would be created without a password. // In that case the user would not be able to login directly into the forum unless they first reset their password on the login page. // SSO login would work smoothly even without the user's account having a password. $user['pw'] = 'john123'; // This is optional. It is useful if an email address is being used as the user's username and the forum is creating a new user account because it doesn't already exist. $user['name'] = 'John Smith'; $parameters = http_build_query($user, NULL, '&'); $HOST = "USERNAME.websitetoolbox.com"; <span class="guestText">// (Replace USERNAME.websitetoolbox.com with your forum address.)</span> $URL = "/register/setauthtoken?". $parameters; $response_xml = doHTTPCall($URL,$HOST); $response_xml = preg_replace_callback('/<!\[CDATA\[(.*)\]\]>/', 'filter_xml', $response_xml); $response_xml = simplexml_load_string($response_xml); $authtoken = htmlentities($response_xml->authtoken); if (!$authtoken) { echo "Login Failed..."; echo $response_xml->errormessage; } /* For Signup Integration*/ /* ------------------------------------------------------------------ */ $user['member'] = "curltest6"; $user['apikey'] = "APIKEY"; $user['pw'] = "curltest"; $user['email'] = "curltest@test6.com"; $user['name'] = "Curl Test"; $parameters = http_build_query($user, NULL, '&'); $HOST = "USERNAME.websitetoolbox.com"; <span class="guestText">// (Replace USERNAME.websitetoolbox.com with your forum address.)</span> $URL = "/register/create_account?". $parameters; $response_xml = doHTTPCall($URL,$HOST); $response_xml = preg_replace_callback('/<!\[CDATA\[(.*)\]\]>/', 'filter_xml', $response_xml); $response_xml = simplexml_load_string($response_xml); $response_msg = trim(htmlentities($response_xml->error)); if ($response_msg == "Signup Complete") { echo "Success!"; } else { echo "Signup Failed..."; echo "$response_msg"; } /* $response returns a status as "Signup Complete", "Error: The username "username" has already been taken.", or "Error: You entered an invalid email address". You can update your website's database according to the responce recieved.*/ /********************** Helper Functions ***********************/ /* Description: This Function is used to POST values on the Website Toolbox server Parameters: $URL - Requested script url $HOST - server host */ function doHTTPCall($URL,$HOST){ $ch = curl_init("http://".$HOST.$URL); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $response = curl_exec($ch); curl_close($ch); return $response; } function filter_xml($matches) { return trim(htmlspecialchars($matches[1])); } ?>

<%@ page import="java.util.*" %> <%@ page import="java.net.*" %> <%@ page import="java.io.*" %> <% // setup the request // REQUEST URL should be replaced by the URL you need to request // For example: http://USERNAME.websitetoolbox.com/register/create_account <span class="guestText">// (Replace USERNAME.websitetoolbox.com with your forum address.)</span> URL u = new URL("REQUEST URL"); URLConnection uc = u.openConnection(); uc.setDoOutput(true); uc.setRequestProperty("Content-Type","application/x-www-form-urlencoded"); // add the query string // For example: String query = "apikey=APIKEY&member=joe&pw=secret"; String query = ""; PrintWriter pw = new PrintWriter(uc.getOutputStream()); pw.println(query); pw.close(); // get the input from the request BufferedReader in = new BufferedReader( new InputStreamReader(uc.getInputStream())); String res = in.readLine(); in.close(); %>

この方法では、 LWP። ユーザーエージェントモジュール.

#!/usr/bin/perl # setup the request use LWP::UserAgent; $ua = new LWP::UserAgent; # REQUEST URL should be replaced by the URL you need to request # For example: http://USERNAME.websitetoolbox.com/register/create_account <span class="guestText"># (Replace USERNAME.websitetoolbox.com with your forum address.)</span> $req = new HTTP::Request 'POST','REQUEST URL'; $req->content_type('application/x-www-form-urlencoded'); # add the query string # For example: $query = "apikey=APIKEY&member=joe&pw=secret"; $query = ""; $req->content($query); # send the request $res = $ua->request($req); if ($res->is_error) { # HTTP error } # the $res->content variable holds the XML result # use XML::Simple to parse the returned XML print "content-type: text/plain\n\n";

シングルサインオンなどのフォーラム API リクエストでは、リクエストに API キーを含める必要があります。APIキーは、APIを介してフォーラムへの完全な許可を与えます。それは安全かつプライベートに保つ必要があります。JavaScriptはクライアント側の言語であるため、APIキーはソースコードを検査する人には完全に見えるでしょう。したがって、JavaScript を使用して API HTTP リクエストを作成することはお勧めしません。

ドメイン名をまたがるネットワーク接続に Web ブラウザーが課す制限のため、 Web プロキシを作成する サーバー側のプログラミング言語の1つを使用して、JavaScriptのHTTPリクエストをサーバーに送信します。あるいは、 コルス HTTPヘッダーを使用して、クロスドメイン要求を許可します。

私たちは、のようなフレームワークを使用することをお勧めします JavaScriptでHTTPリクエストを作るためのjQuery。フレームワークを使用したくない場合は、以下のサンプルコードを使用できます。

• Schools

<script> <!-- var myxmlhttp; doRequest(); function doRequest () { // REQUEST URL should be replaced by the URL you need to request // For example: http://USERNAME.websitetoolbox.com/register/create_account?apikey=APIKEY&member=test&pw=test1&email=john@doe.com <span class="guestText">// (Replace USERNAME.websitetoolbox.com with your forum address.)</span> var url = "REQUEST URL"; myxmlhttp = CreateXmlHttpReq(resultHandler); if (myxmlhttp) { XmlHttpGET(myxmlhttp, url); } else { alert("An error occured while attempting to process your request."); // provide an alternative here that does not use XMLHttpRequest } } function resultHandler () { // request is 'ready' if (myxmlhttp.readyState == 4) { // success if (myxmlhttp.status == 200) { alert("Success!"); // myxmlhttp.responseText is the content that was received from the request // Signup : in the signup process xmlRootNode returns whether the user signed up or not var responsedata = myxmlhttp.responseXML; var xmlRootNode = responsedata.getElementsByTagName("error")[0].firstChild.nodeValue; //alert(xmlRootNode); // Lgoin : after log in on forum user get access token, this token used on log in success page. var responsedata = myxmlhttp.responseXML; var xmlRootNode = responsedata.getElementsByTagName("authtoken")[0].firstChild.nodeValue; //alert(xmlRootNode); } else { alert("There was a problem retrieving the data:\n" + req.statusText); } } } function CreateXmlHttpReq(handler) { var xmlhttp = null; if (window.XMLHttpRequest) { xmlhttp = new XMLHttpRequest(); } else if (window.ActiveXObject) { // users with activeX off try { xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); } catch (e) {} } if (xmlhttp) xmlhttp.onreadystatechange = handler; return xmlhttp; } // XMLHttp send GEt request function XmlHttpGET(xmlhttp, url) { try { xmlhttp.open("GET", url, true); xmlhttp.send(null); } catch (e) {} } --> </script>

<% ' Start out declaring our variables. ' You are using Option Explicit aren't you? Dim objWinHttp Dim strHTML ' New WinHTTP v5.1 - from MS: ' ' With version 5.1, WinHTTP is now an operating-system component ' of the following systems: ' - Microsoft Windows Server 2003 family ' - Microsoft Windows XP, Service Pack 1 ' - Microsoft Windows 2000, Service Pack 3 (except Datacenter Server) Set objWinHttp = Server.CreateObject("WinHttp.WinHttpRequest.5") ' Full Docs: ' http://msdn.microsoft.com/library/en-us/winhttp/http/portal.asp ' ' If you have trouble or are getting connection errors, ' try using the proxycfg.exe tool. ' Here we get the request ready to be sent. ' First 2 parameters indicate method and URL. ' The third is optional and indicates whether or not to ' open the request in asyncronous mode (wait for a response ' or not). The default is False = syncronous = wait. ' Syntax: ' .Open(bstrMethod, bstrUrl [, varAsync]) ' REQUEST URL should be replaced by the URL you need to request ' For example: http://USERNAME.websitetoolbox.com/register/create_account <span class="guestText">' (Replace USERNAME.websitetoolbox.com with your forum address.)</span> objWinHttp.Open "GET", "REQUEST URL" ' Send it objWinHttp.Send ' Print out the request status: Response.Write "Status: " & objWinHttp.Status & " " _ & objWinHttp.StatusText & "<br />" ' Get the text of the response. strHTML = objWinHttp.ResponseText ' Trash our object now that I'm finished with it. Set objWinHttp = Nothing %>

// Import below packages. Imports System.Xml Imports System.IO Imports System.Text Imports System.Net //For log in integration //Example parameters are given below. Replace these with the actual parameters for the URL. Dim wtb_username As String wtb_username = "USERNAME" Dim wtb_api As String wtb_api = "APIKEY" Dim wtb_host As String wtb_host = "http://" & wtb_username & ".websitetoolbox.com" Dim wtb_url As String wtb_url = "/register/setauthtoken?apikey=" & wtb_api & "&user=" & "member" Dim Wtb_token As String Wtb_token = doHTTPCall(wtb_url, wtb_host) Dim wtb_str_log_in As String wtb_str_log_in = wtb_host & "/register/dologin?authtoken=" & Wtb_token Dim wtb_str_log_out As String wtb_str_log_out = Wtb_token Session("login_url") = wtb_str_log_in Session("logout_url") = wtb_str_log_out //Pass Session("login_url") on the log in sussess page in an image. Just like below //<img src='Session("login_url")' border='0' width='1' height='1' alt=''> //Pass Session("logout_url") on the log out sussess page in an image. Just like below //<img src='wtb_host & "/register/logout?authtoken=" & Session("logout_url")' border='0' width='1' height='1' alt=''> // For signup integration //Example parameters are given below. Replace these with the actual parameters for the URL. Dim wtb_username As String wtb_username = "USERNAME" Dim wtb_api As String wtb_api = "APIKEY" Dim wtb_host As String <span class="guestText">// (Replace USERNAME.websitetoolbox.com with your forum address.)</span> wtb_host = "http://" & wtb_username & ".websitetoolbox.com" Dim member As String member = "Joe" Dim pass As String pass = "secret" Dim email As String email = "joe@test.com" Dim parameter As String parameter = "member=" & member & "&apikey=" & wtb_api & "&pw=" & pass & "&email=" & email Dim wtb_url As String wtb_url = "/register/create_account?" & parameter Dim Wtb_register As String Wtb_register = doHTTPCall(wtb_url, wtb_host) // Description: This Function is used to post values on the Website Toolbox server and get responce Public Function doHTTPCall(ByVal URL As String, ByVal HOST As String) As String Try Dim wtb_str As String wtb_str = HOST & URL Dim m_xmld As XmlDocument Dim m_nodelist As XmlNodeList Dim m_node As XmlNode 'Create the XML Document m_xmld = New XmlDocument() 'Load the Xml file m_xmld.Load(wtb_str) 'Get the list of name nodes m_nodelist = m_xmld.SelectNodes("response") For Each m_node In m_nodelist 'Get the Gender Attribute Value Dim authtoken = m_node.ChildNodes.Item(0).InnerText doHTTPCall = authtoken Next Catch errorVariable As Exception 'Error trapping 'Console.Write(errorVariable.ToString()) End Try End Function