會員管理平台

const MCC_BASE = 'https://members.managers.center';
const SERVICE_SUUID = 'your-service-suuid';
const REDIRECT_URI = 'https://your-site.com/callback';

function loginWith(provider) {
  const params = new URLSearchParams({
    service_suuid: SERVICE_SUUID,
    redirect_uri: REDIRECT_URI,
    response_mode: 'code'
  });
  window.location.href = 
    `${MCC_BASE}/auth/idp/${provider}/start?${params}`;
}

// callback.html - 先檢查錯誤，再處理 code
const params = new URLSearchParams(location.search);
const error = params.get('error');
const errorDescription = params.get('error_description');
const provider = params.get('provider');

if (error === 'idp_not_configured') {
  showMessage(`${provider || '該'} 登入尚未設定，請使用其他方式`);
  return;
}
if (error) {
  showMessage(errorDescription || '登入發生錯誤');
  return;
}

const code = params.get('code');
if (code) {
  // 將 code 送給後端兌換
  fetch('/api/auth/exchange', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ code })
  }).then(r => r.json())
    .then(data => {
      if (data.success) {
        localStorage.setItem('member_suuid', data.data.member_suuid);
        localStorage.setItem('access_token', data.data.accessToken);
      }
    });
}

const MCC_BASE = 'https://members.managers.center';
const GROUP_JWT = process.env.GROUP_JWT;     // 從環境變數取得
const SERVICE_CODE = process.env.SERVICE_CODE;

app.post('/api/auth/exchange', async (req, res) => {
  const { code } = req.body;
  
  const response = await fetch(`${MCC_BASE}/auth/idp/exchange`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${GROUP_JWT}`,
      'X-Service-Code': SERVICE_CODE,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ code })
  });
  
  const data = await response.json();
  res.json(data);  // { success: true, data: { member_suuid, accessToken } }
});

// 驗證會員 accessToken 是否有效
app.post('/api/member/check', async (req, res) => {
  const { member_suuid, access_token } = req.body;
  
  const response = await fetch(`${MCC_BASE}/member/check`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${GROUP_JWT}`,
      'X-Service-Code': SERVICE_CODE,
      'X-Member-Suuid': member_suuid,
      'X-Member-Access-Token': access_token,
      'Content-Type': 'application/json'
    }
  });
  
  const data = await response.json();
  // { success: true, data: { member_suuid, email, display_name, ttl, ... } }
  res.json(data);
});