Integration Guide: E-Wallet SSO

This guide describes how to integrate the Innovorder E-Wallet (e-rechargement) interface into an external guest application (e.g., via a WebView) using a Single Sign-On (SSO) mechanism.

1. Generate the JWT

First, your backend must generate a signed JWT containing the user's identity. This token serves as a proof of authentication.

Payload Structure

{
  "email": "user@example.com",
  "brandId": 12345,
  "date": "2023-10-27T10:00:00.000Z" // ISO 8601 String
}

Example (Node.js)

const jwt = require('jsonwebtoken');

const payload = {
  email: "user@example.com",
  brandId: 691,
  date: new Date().toISOString()
};

const jwtSecret = "YOUR_SHARED_SECRET_KEY";
const signedJwt = jwt.sign(payload, jwtSecret);

console.log(signedJwt); 
// Output: eyJhbGciOiJIUzI1NiIsIn...

2. Exchange for Access Token

Unlike the Web Ordering SSO, the E-Wallet requires a valid API accessToken to perform the auto-login. You must exchange your signed JWT for an Innovorder accessToken via the API.

{
  "autoLoginJWT": "eyJhbGciOiJIUzI1NiIsIn..."
}

{
  "access_token": "VALID_ACCESS_TOKEN_XYZ...",
  "token_type": "Bearer"
}

3. Redirect the User

Construct the final URL by appending the received accessToken to the autoLoginByAccessToken query parameter. Open this URL in your WebView or iframe.