Developer Hub & Documentation for SSO Develop

// Verify RS256 Bearer Token using remote JWKS
import { createRemoteJWKSet, jwtVerify } from 'jose';

const jwks = createRemoteJWKSet(
  new URL('https://sso555.com/.well-known/jwks.json')
);

export async function verifyToken(bearerToken: string, expectedClientId: string) {
  const { payload } = await jwtVerify(bearerToken, jwks, {
    issuer: 'https://sso555.com',
    audience: expectedClientId,
    algorithms: ['RS256'],
    clockTolerance: 30, // 30-second clock skew tolerance
  });
  return payload; // { sub, email, name, role, scope }
}

# High-performance RS256 check with JWKS cache & remote fallback
from cryptography.hazmat.primitives.asymmetric import padding
from cryptography.hazmat.primitives import hashes
import time, json, base64, aiohttp

async def verify_sso_token(token: str, sso_url: str = 'https://sso555.com'):
    clean_token = token.replace('Bearer ', '').strip()
    keys = await fetch_cached_jwks(sso_url)
    parts = clean_token.split('.')
    # 1. Fast path: mathematical RS256 signature check
    if len(parts) == 3:
        h, b, sig = parts
        sig_bytes = base64.urlsafe_b64decode(sig + '==')
        msg = f"{h}.{b}".encode('utf-8')
        for key in keys:
            try:
                key.verify(sig_bytes, msg, padding.PKCS1v15(), hashes.SHA256())
                return json.loads(base64.urlsafe_b64decode(b + '==').decode())
            except Exception: continue
    # 2. Resilient fallback: remote userinfo check for opaque tokens
    async with aiohttp.ClientSession() as s:
        async with s.get(f"{sso_url}/oidc/userinfo",
                         headers={'Authorization': f'Bearer ' + clean_token}) as r:
            if r.status == 200: return await r.json()
    return None

// 3-Tier resilient user avatar component
export function UserAvatar({ avatarUrl, name, size = 'w-9 h-9' }) {
  const [failed, setFailed] = useState(false);
  const [loaded, setLoaded] = useState(false);

  return (
    <div className={`${size} rounded-full overflow-hidden relative flex items-center justify-center bg-gradient-to-tr from-[#0b57d0] to-[#06b6d4] text-white font-semibold`}>
      {avatarUrl && !failed ? (
        <img
          src={avatarUrl}
          alt="" // Empty alt prevents native broken text leakage
          onLoad={() => setLoaded(true)}
          onError={() => setFailed(true)}
          className={`w-full h-full object-cover transition-opacity duration-200 ${loaded ? 'opacity-100' : 'opacity-0'}`}
        />
      ) : (
        // Material 3 user silhouette fallback SVG icon
        <svg viewBox="0 0 24 24" fill="currentColor" className="w-3/5 h-3/5 text-white/95">
          <path d="M12 12c2.21 0 4-1.79 4-4s-1.79-4-4-4-4 1.79-4 4 1.79 4 4 4zm0 2c-2.67 0-8 1.34-8 4v2h16v-2c0-2.66-5.33-4-8-4z" />
        </svg>
      )}
    </div>
  );
}