3 files changed, 114 insertions, 0 deletions
diff --git a/examples/server/.htaccess b/examples/server/.htaccess
new file mode 100644
index 0000000..7bb4b5b
--- /dev/null
+++ b/examples/server/.htaccess
@@ -0,0 +1,6 @@
+RewriteEngine On
+
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteRule (.+) index.php?command=$1 [L]
+
diff --git a/examples/server/MySSOServer.php b/examples/server/MySSOServer.php
new file mode 100644
index 0000000..ca523b0
--- /dev/null
+++ b/examples/server/MySSOServer.php
@@ -0,0 +1,90 @@
+<?php
+
+use Jasny\ValidationResult;
+use Jasny\SSO;
+
+/**
+ * Example SSO server.
+ * 
+ * Normally you'd fetch the broker info and user info from a database, rather then declaring them in the code.
+ */
+class MySSOServer extends SSO\Server
+{
+    /**
+     * Registered brokers
+     * @var array
+     */
+    private static $brokers = [
+        'Alice' => ['secret'=>'8iwzik1bwd'],
+        'Greg' => ['secret'=>'7pypoox2pc'],
+        'Julias' => ['secret'=>'ceda63kmhp']
+    ];
+
+    /**
+     * System users
+     * @var array
+     */
+    private static $users = array (
+        'jackie' => [
+            'fullname' => 'Jackie Black',
+            'email' => 'jackie.black@example.com',
+            'password' => '$2y$10$lVUeiphXLAm4pz6l7lF9i.6IelAqRxV4gCBu8GBGhCpaRb6o0qzUO' // jackie123
+        ],
+        'john' => [
+            'fullname' => 'John Doe',
+            'email' => 'john.doe@example.com',
+            'password' => '$2y$10$RU85KDMhbh8pDhpvzL6C5.kD3qWpzXARZBzJ5oJ2mFoW7Ren.apC2' // john123
+        ],
+    );
+
+    /**
+     * Get the API secret of a broker and other info
+     *
+     * @param string $brokerId
+     * @return array
+     */
+    protected function getBrokerInfo($brokerId)
+    {
+        return isset(self::$brokers[$brokerId]) ? self::$brokers[$brokerId] : null;
+    }
+
+    /**
+     * Authenticate using user credentials
+     *
+     * @param string $username
+     * @param string $password
+     * @return ValidationResult
+     */
+    protected function authenticate($username, $password)
+    {
+        if (!isset($username)) {
+            return ValidationResult::error("username isn't set");
+        }
+        
+        if (!isset($password)) {
+            return ValidationResult::error("password isn't set");
+        } 
+        
+        if (!isset(self::$users[$username]) || !password_verify($password, self::$users[$username]['password'])) {
+            return ValidationResult::error("Invalid credentials");
+        }
+
+        return ValidationResult::success();
+    }
+
+
+    /**
+     * Get the user information
+     *
+     * @return array
+     */
+    protected function getUserInfo($username)
+    {
+        if (!isset(self::$users[$username])) return null;
+    
+        $user = compact('username') + self::$users[$username];
+        unset($user['password']);
+        
+        return $user;
+    }
+}
diff --git a/examples/server/index.php b/examples/server/index.php
new file mode 100644
index 0000000..5416eb9
--- /dev/null
+++ b/examples/server/index.php
@@ -0,0 +1,18 @@
+<?php
+
+require_once __DIR__ . '/../../vendor/autoload.php';
+require_once 'MySSOServer.php';
+
+$ssoServer = new MySSOServer();
+$command = isset($_REQUEST['command']) ? $_REQUEST['command'] : null;
+
+if (!$command || !method_exists($ssoServer, $command)) {
+    header("HTTP/1.1 404 Not Found");
+    header('Content-type: application/json; charset=UTF-8');
+    
+    echo json_encode(['error' => 'Unknown command']);
+    exit();
+}
+
+$result = $ssoServer->$command();
+