Partner App Demo

SSO Partner Integration Example

A Nuxt 3 reference app demonstrating OAuth 2.0 login and HMAC-signed Partner API calls with SSOAPI_FastAPI.

OAuth 2.0 Login

Authorization code flow via GET /oauth/authorize. Token exchange happens server-side — client secret never reaches the browser.

Partner Profile API

Calls /partner/member/{pairwise_id}/profile with HMAC-SHA256 signed headers. Returns name, age, and gender — never email or real IDs.

Pairwise Identity

Members are identified by a pairwise UUID unique to this application. The real UserId and email are never exposed to partners.

Always Fresh Data

The profile endpoint syncs from the external Membership API server before every response, guaranteeing the latest name, age, and status.