Aha! Roadmaps | Portal SSO | JSON Web Token

Building the JWT response

When it receives a JWT authentication request your application must wait for a JWT response. The response should include a HS256-encoded token containing these fields:

• iat - The integer time the response was created in seconds since the Unix epoch.

• jti - A randomly created token that uniquely identifies this response.

• first_name - the first name of the user that was authenticated.

• last_name - the last name of the user that was authenticated.

• email - the email address of the user that was authenticated. The email address is used to uniquely identify the user within the ideas portal.

• sub - a unique identifier for the user

Here is sample Ruby code to generate a response:

iat = Time.now.utc.to_i
jti = "#{iat}/#{rand(36**64).to_s(36)}"
payload = JWT.encode(
  {
    iat: iat,
    jti: jti,
    first_name: "John",
    last_name: "Doe",
    email: "john.doe@aha.io",
  }, 
  secret_key)

Here is the format of a URL used for login. This URL can be copied from the Callback URL in your SSO configuration:

"https://#{account_domain}.identity.aha.io/idea_portal_provider/jwt_callback?jwt=#{payload}"

Here is an example URL:

https://yoursubdomain.identity.aha.io/idea_portal_provider/jwt_callback?jwt=your-jwt

Your URL will generate a JWT that looks like this:

{ "iat": 158258345634, "jti": "1234567890abcdefg", "first_name": "John", "last_name": "Doe", "email": "john.doe@aha.io" }

If the request contains state query parameter then the value of that parameter should also be included in the redirect:

"https://#{account_domain}.identity.aha.io/idea_portal_provider/jwt_callback?jwt=#{payload}&state=#{state}"

Top