BowlingTracker.com SSO Integration Guide

Simple Machines Forum (SMF 2.x) Integration

SMF uses a hook system. Install firebase/php-jwt via Composer, then register a hook to intercept navigation actions.

1. Install the library

composer require firebase/php-jwt

2. Create an SMF mod / hook file

Create Sources/BowlingTrackerSSO.php in your SMF installation:

<?php
// File: Sources/BowlingTrackerSSO.php

if (!defined('SMF')) die('No direct access...');

require_once(dirname __DIR__ . '/vendor/autoload.php');
use Firebase\JWT\JWT;

// ── Configuration ────────────────────────────────────────────────
define('BT_ISSUER',      'https://yoursite.com/forums');
define('BT_AUDIENCE',   'https://bowlingtracker.com');
define('BT_PRIVATE_KEY', file_get_contents('/etc/ssl/private/bt_private.pem'));
define('BT_REDIRECT',   'https://bowlingtracker.com/Home/Index');
// ─────────────────────────────────────────────────────────────────

/**
 * Called from a custom SMF action, e.g. ?action=bt_sso
 * Register in Modifications.php:
 *   $modSettings['integrate_actions'] .= ',bt_sso=BowlingTrackerSSO_Action';
 */
function BowlingTrackerSSO_Action()
{
    global $user_info;

    if ($user_info['is_guest']) {
        // Guest — redirect without token.
        redirectexit(BT_REDIRECT);
    }

    $now = time();

    $payload = [
        'iss'        => BT_ISSUER,
        'aud'        => BT_AUDIENCE,
        'nbf'        => $now - 900,
        'exp'        => $now + 300,
        'ExternalId' => (string)$user_info['id'],
        'Username'   => $user_info['name'],
    ];

    $jwt = JWT::encode($payload, BT_PRIVATE_KEY, 'RS256');

    redirectexit(BT_REDIRECT . '?Token=' . urlencode($jwt));
}

3. Register the action hook

In your Settings.php or a mod's install.php, add:

add_integration_function('integrate_actions', 'BowlingTrackerSSO_Action', false, '$sourcedir/BowlingTrackerSSO.php');

4. Add a menu item

Link your users to https://yoursite.com/forums/index.php?action=bt_sso. SMF will invoke the hook, generate the token, and redirect seamlessly.

Generic PHP Integration

Works for any PHP 7.4+ application (Laravel, Symfony, CodeIgniter, plain PHP, etc.).

<?php
require 'vendor/autoload.php';
use Firebase\JWT\JWT;

$privateKey = file_get_contents('/etc/ssl/private/bt_private.pem');
$now        = time();

$payload = [
    'iss'        => 'https://yoursite.com/forums',
    'aud'        => 'https://bowlingtracker.com',
    'nbf'        => $now - 900,
    'exp'        => $now + 300,
    'ExternalId' => (string)$_SESSION['user_id'],
    'Username'   => $_SESSION['username'],
];

$jwt = JWT::encode($payload, $privateKey, 'RS256');
header('Location: https://bowlingtracker.com/Home/Index?Token=' . urlencode($jwt));
exit;

Node.js / Express Integration

// npm install jsonwebtoken
const jwt        = require('jsonwebtoken');
const fs         = require('fs');
const privateKey = fs.readFileSync('/etc/ssl/private/bt_private.pem');

// Express route: GET /bt-sso
app.get('/bt-sso', (req, res) => {
    if (!req.user) return res.redirect('https://bowlingtracker.com/Home/Index');

    const token = jwt.sign(
        {
            ExternalId: String(req.user.id),
            Username:   req.user.username,
        },
        privateKey,
        {
            algorithm : 'RS256',
            issuer    : 'https://yoursite.com/forums',
            audience  : 'https://bowlingtracker.com',
            notBefore : '-15m',
            expiresIn : '5m',
        }
    );
    res.redirect(`https://bowlingtracker.com/Home/Index?Token=${encodeURIComponent(token)}`);
});

Python / Django / Flask Integration

# pip install PyJWT cryptography
import jwt, time
from cryptography.hazmat.primitives import serialization

with open('/etc/ssl/private/bt_private.pem', 'rb') as f:
    private_key = serialization.load_pem_private_key(f.read(), password=None)

now = int(time.time())
payload = {
    'iss':        'https://yoursite.com/forums',
    'aud':        'https://bowlingtracker.com',
    'nbf':        now - 900,
    'exp':        now + 300,
    'ExternalId': str(request.user.id),
    'Username':   request.user.username,
}

token = jwt.encode(payload, private_key, algorithm='RS256')

# Flask example
from flask import redirect
return redirect(f'https://bowlingtracker.com/Home/Index?Token={token}')

ASP.NET Core Integration

Install Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt via NuGet.

using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Security.Cryptography;
using Microsoft.IdentityModel.Tokens;

// In your controller action:
public IActionResult BowlingTrackerSSO()
{
    if (!User.Identity?.IsAuthenticated ?? true)
        return Redirect("https://bowlingtracker.com/Home/Index");

    var pem        = System.IO.File.ReadAllText("/etc/ssl/private/bt_private.pem");
    var rsa        = RSA.Create();
    rsa.ImportFromPem(pem);
    var creds      = new SigningCredentials(new RsaSecurityKey(rsa), SecurityAlgorithms.RsaSha256);

    var claims = new[]
    {
        new Claim("ExternalId", User.FindFirstValue(ClaimTypes.NameIdentifier)!),
        new Claim("Username",   User.Identity!.Name!),
    };

    var token = new JwtSecurityToken(
        issuer:             "https://yoursite.com/forums",
        audience:           "https://bowlingtracker.com",
        claims:             claims,
        notBefore:          DateTime.UtcNow.AddMinutes(-15),
        expires:            DateTime.UtcNow.AddMinutes(5),
        signingCredentials: creds);

    var tokenString = new JwtSecurityTokenHandler().WriteToken(token);
    return Redirect($"https://bowlingtracker.com/Home/Index?Token={Uri.EscapeDataString(tokenString)}");
}

WordPress Integration

Install firebase/php-jwt via Composer, then add a shortcode or a custom page template.

<?php
// Add to your theme's functions.php or a custom plugin.
require_once get_template_directory() . '/vendor/autoload.php';
use Firebase\JWT\JWT;

add_action('template_redirect', function () {
    if (!is_page('bowling-tracker-sso')) return;  // Only on a dedicated page slug.

    if (!is_user_logged_in()) {
        wp_redirect('https://bowlingtracker.com/Home/Index');
        exit;
    }

    $user       = wp_get_current_user();
    $now        = time();
    $privateKey = file_get_contents('/etc/ssl/private/bt_private.pem');

    $payload = [
        'iss'        => 'https://yoursite.com',
        'aud'        => 'https://bowlingtracker.com',
        'nbf'        => $now - 900,
        'exp'        => $now + 300,
        'ExternalId' => (string)$user->ID,
        'Username'   => $user->user_login,
    ];

    $jwt = JWT::encode($payload, $privateKey, 'RS256');
    wp_redirect('https://bowlingtracker.com/Home/Index?Token=' . urlencode($jwt));
    exit;
});

XenForo 2.x Integration

Create a simple XenForo add-on with a controller action.

<?php
// File: src/addons/YourVendor/BtSso/Pub/Controller/Sso.php
namespace YourVendor\BtSso\Pub\Controller;

use XF\Mvc\ParameterBag;
use XF\Pub\Controller\AbstractController;
use Firebase\JWT\JWT;

class Sso extends AbstractController
{
    public function actionIndex(ParameterBag $params)
    {
        $visitor = \XF::visitor();

        if (!$visitor->user_id) {
            return $this->redirect('https://bowlingtracker.com/Home/Index');
        }

        $privateKey = file_get_contents('/etc/ssl/private/bt_private.pem');
        $now        = time();

        $payload = [
            'iss'        => 'https://yoursite.com/forums',
            'aud'        => 'https://bowlingtracker.com',
            'nbf'        => $now - 900,
            'exp'        => $now + 300,
            'ExternalId' => (string)$visitor->user_id,
            'Username'   => $visitor->username,
        ];

        $jwt = JWT::encode($payload, $privateKey, 'RS256');
        return $this->redirect('https://bowlingtracker.com/Home/Index?Token=' . urlencode($jwt));
    }
}

Register the route bt-sso pointing to YourVendor\BtSso:Sso in your add-on's routes.php.