public static string GetApplicationToken()
{
    string urlForToken = "https://www.saaspass.com/sd/rest/applications/" + apiKey + "/tokens?password=" + apiPassword;
    return GetToken(urlForToken);
}

public static string GetToken(string url)
{
    try
    {
        WebRequest request = WebRequest.Create(url);
        WebResponse response = request.GetResponse();
        StreamReader reader = new StreamReader(response.GetResponseStream());
        string tokenJsonString = reader.ReadToEnd();
        if (tokenJsonString != null)
        {
            JToken tokenJtoken = JObject.Parse(tokenJsonString);
            return (string)tokenJtoken.SelectToken("token");
        }
        else
        {
            return null;
        }
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    ErrMessage = reader.ReadToEnd();
                }
            }
        }
        return null;
    }
}

import org.springframework.web.client.RestTemplate;

class TokenGeneration {

    private static final String API_URL = "https://www.saaspass.com/sd/rest";

    public String getAppToken() {
        String url = "%s/applications/%s/tokens?password=%s";
        url = String.format(url, API_URL, APP_API_KEY, APP_PASSWORD);
        RestTemplate restTemplate = new RestTemplate();
        return restTemplate.getForObject(url, TokenResponse.class).token;
    }

    private class TokenResponse {
        private String token;
        public String getToken() { return token; }
    }

import requests
from Constants import Constant
class ApplicationToken():
     appToken = None
     def get(self):
         return self.getToken() if self.appToken == None else self.appToken

     def getToken(self):
         url = '%s/applications/%s/tokens?password=%s' % (Constant.API_URL, Constant.APP_API_KEY, Constant.APP_PASSWORD)
         response = requests.get(url).json()['token']
         self.appToken = response
         return self.appToken

     def invalidate(self):
         self.appToken = None

appToken = ApplicationToken()

<?php
public function getApplicationToken(){
        $url = AppMethods::$mydomain."/".AppMethods::$apiKey . "/tokens?password=" . AppMethods::$apiPassword;
        return AppMethods::getToken($url);
   }


public function getToken($token_url){
    try{
        $ch  = curl_init();
        curl_setopt($ch,CURLOPT_URL,$token_url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $jsonresponse = curl_exec($ch);

        if(!$jsonresponse == null){
           $jdec = json_decode($jsonresponse);
           if(isset($jdec->{'token'}))
                return $jdec->{'token'};
           else{
                return $jsonresponse;
           }
        }
        else{
            return null;
        }
    }
    catch(Exception $e){
        echo $e->getMessage();
    }

    curl_close($ch);
}
>

public static string GetCompanyToken()
{
    string urlForCompanyToken = "https://www.saaspass.com/sd/rest/" + companyKey + "/tokens?companysecret=" + companySecret;
    return GetToken(urlForCompanyToken);
}

    public String getCompanyToken() {
        String url = "%s/%s/tokens?companysecret=%s";
        url = String.format(url, API_URL, COMPANY_KEY, COMPANY_SECRET);
        RestTemplate restTemplate = new RestTemplate();
        return restTemplate.getForObject(url, TokenResponse.class).token;
    }
}

import requests
from Constants import Constant
class CompanyToken():
     companyToken = None
     def get(self):
         return self.getToken() if self.companyToken == None else self.companyToken

     def getToken(self):
         url = '%s/%s/tokens?companysecret=%s' % (Constant.API_URL, Constant.COMPANY_KEY, Constant.COMPANY_PASSWORD)
         response = requests.get(url).json()['token']
         self.companyToken = response
         return self.companyToken

     def invalidate(self):
         self.companyToken = None

companyToken = CompanyToken()

<?php
public function getCompanyToken(){
        $url = AppMethods::$myDom ."/". AppMethods::$companyKey. "/tokens?companysecret=" . AppMethods::$companySecret;
        return AppMethods::getToken($url);
}



public function getToken($token_url){
    try{
        $ch  = curl_init();
        curl_setopt($ch,CURLOPT_URL,$token_url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $jsonresponse = curl_exec($ch);

        if(!$jsonresponse == null){
           $jdec = json_decode($jsonresponse);
           if(isset($jdec->{'token'}))
                return $jdec->{'token'};
           else{
                return $jsonresponse;
           }
        }
        else{
            return null;
        }
    }
    catch(Exception $e){
        echo $e->getMessage();
    }

    curl_close($ch);
}
>

public static bool OTPCheck(string username, string otp, string apptoken)
{
    string urlForOtp = "https://www.saaspass.com/sd/rest/applications/" + apiKey + "/otpchecks?username=" + username + "&otp=" + otp + "&token=" + apptoken;
    return CheckResponse(urlForOtp);

}

public static bool CheckResponse(string url)
{
    try
    {
        WebRequest webRequest = WebRequest.Create(url);
        if (webRequest.GetResponse() != null)
        {
            HttpWebResponse response = (HttpWebResponse)webRequest.GetResponse();
            if (response.StatusCode == HttpStatusCode.OK)
            {
                if (response.GetResponseStream() != null)
                {
                    StreamReader reader = new StreamReader(response.GetResponseStream());
                    string jsonString = reader.ReadToEnd();
                    if (jsonString != null && !jsonString.Equals(""))
                    {
                        JToken tokenJtoken = JObject.Parse(jsonString);
                        ErrMessage = tokenJtoken.SelectToken("resultMessage") != null ? (string)tokenJtoken.SelectToken("resultMessage") : "";
                        ErrMessage += tokenJtoken.SelectToken("warning") != null ? " - " + (string)tokenJtoken.SelectToken("warning") : "";
                    }
                }
                return true;
            }
            else
                return false;
        }
        else
            return false;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    if (httpResponse.StatusCode.ToString()=="429")
                    {
                        ErrMessage = " X-Rate-Limit-Limit " + httpResponse.Headers["X-Rate-Limit-Limit"];
                        ErrMessage += " ### X-Rate-Limit-Remaining " + httpResponse.Headers["X-Rate-Limit-Remaining"];
                        ErrMessage += " ### X-Rate-Limit-Resets " + httpResponse.Headers["X-Rate-Limit-Resets"];
                    }
                    else
                        ErrMessage += reader.ReadToEnd();
                }
            }
        }
        return false;
    }
}

import org.springframework.http.ResponseEntity;
import org.springframework.web.client.RestTemplate;

class OneTimePassword {

    private static final String API_URL = "https://www.saaspass.com/sd/rest";

    public boolean otpCheck(String username, String otp) {
        String url = "%s/applications/%s/otpchecks?username=%s&otp=%s&token=%s";
        url = String.format(url, API_URL, APP_API_KEY, username, otp, getAppToken());
        ResponseEntity<?> r = call(url, OtpCheckResponse.class);
        return r.getStatusCode() == OK;
    }

    private <T> ResponseEntity<?> call(String url, Class<T> responseType) {

        RestTemplate restTemplate = new RestTemplate();
        restTemplate.setErrorHandler(new ResponseErrorHandler());

        try {
            return ResponseEntity.ok(restTemplate.getForObject(url, responseType));
        } catch (ApiException e) {
            return ResponseEntity.status(e.getStatusCode()).body(e.getErrorResponse());
        }
    }

    private class OtpCheckResponse {
    }
}

def login(self, username, otp):
   url = "%s/applications/%s/otpchecks?username=%s&otp=%s&token=%s" % (Constant.API_URL, Constant.APP_API_KEY, username, otp, self.appT.get())
   response = requests.get(url)
   if response.status_code == 'EXPIRED_TOKEN':
       self.appT.invalidate()
       appService.login(username,otp)
   else:
       response
   return response if response.status_code == 200 else response.json()


@app.route('/login', methods=['GET','POST'])
def Login():
   form = LoginForm(request.form)
   if request.method == 'POST' and form.validate_on_submit():
      result = appService.login(form.username.data, form.otp.data)
      flash(result)
   return render_template('login.html', title='Login', form=form)

<?php
public static function OTPCheck($user,$otp,$token){
       $url = $mydomain . $apiKey . "/otpchecks?username=" . $user . "&ot=" . $otp . "&token=" . $token;
       return AppMethods::CheckResponse($url);
   }

public function CheckResponse($token_url){
        try{
            $ch  = curl_init();
            curl_setopt($ch,CURLOPT_URL,$token_url);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);            
            $data = json_decode(curl_exec($ch),true);
            $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
            curl_close($ch);
           if($httpcode == '200'){

               return $httpcode;
           }
         else{
            return null;
            }
        }
        catch(Exception $e){
            echo $e->getMessage();
        }
}
>

///This block of code should be in Example.aspx, which page in the barcode.
protected void Page_Load(object sender, EventArgs e)
{
    try
    {
        Session["appToken"] = GetApplicationToken();
        if (Session["appToken"] != null && !Session["appToken"].Equals(""))
        {
            string session = HttpContext.Current.Session.SessionID;
            barcodeImageGrid.ImageUrl = GetBarcodeImage(Session["appToken"].ToString(), session,"IL");
            ClientAdapter.Instance.Join(session);
            Session["session"] = session;
       }
        else
        {
            Response.Write("Session Expired!");
        }
    }
    catch (Exception){}
}       

///This block of code should be in InstantExample.aspx, which page's url is Instant Post URL .
protected void Page_Load(object sender, EventArgs e)
{
    Message message = new Message();
    message.reqSession = Request.Headers["session"];
    message.reqTracker = Request.Headers["tracker"];
    message.reqUsername = Request.Headers["username"];

    if (!TrackerIdValidation(message.reqUsername, message.reqTracker, GetApplicationToken()))
        return;
    else
    {
        if (!string.IsNullOrWhiteSpace(message.reqSession) && !string.IsNullOrEmpty(message.reqTracker) && !string.IsNullOrEmpty(message.reqUsername))
        {
            Session["username"] = message.reqUsername;
            ClientAdapter.Instance.SendMessage(message);
        }
    }
}

public static string GetBarcodeImage(string apptoken, string session, string type)
{
    string urlForBarcode = domain + "/rest/applications/" + apiKey + "/barcodes?type=" + type + "&session=" + session + "&token=" + apptoken;

    try
    {
        WebRequest reqForBarcode = WebRequest.Create(urlForBarcode);
        WebResponse resForBarcode = reqForBarcode.GetResponse();
        StreamReader readBarcode = new StreamReader(resForBarcode.GetResponseStream());
        string barcodeJsonString = readBarcode.ReadToEnd();

        if (!barcodeJsonString.Equals(""))
        {
            JToken barcodeJtoken = JObject.Parse(barcodeJsonString);
            if (barcodeJtoken.SelectToken("bluetoothcode") != null)
                return "saaspass://bluepass?" + (string)barcodeJtoken.SelectToken("bluetoothcode");
            else
                return "data:image/png;base64," + (string)barcodeJtoken.SelectToken("barcodeimage");
        }
        else
            return null;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    ErrMessage = reader.ReadToEnd();
                }
            }
        }
        return null;
    }
}

import org.springframework.http.ResponseEntity;
import org.springframework.web.client.RestTemplate;

class ScanBarcode {

    private static final String API_URL = "https://www.saaspass.com/sd/rest";

    public String barcodes(BarcodeType type, String session) {

        String url = "%s/applications/%s/barcodes?type=%s&session=%s&token=%s";
        url = String.format(url, API_URL, APP_API_KEY, type, session, getAppToken());

        ResponseEntity<?> r = call(url, BarcodeResponse.class);
        if (r.getStatusCode() != OK) return null;

        BarcodeResponse body = (BarcodeResponse) r.getBody();

        if (body.barcodeimage != null)
            return "data:image/png;base64," + body.barcodeimage;

        if (body.bluetoothcode != null)
            return "saaspass://bluepass?" + body.bluetoothcode;

        return null;
    }

    private <T> ResponseEntity<?> call(String url, Class<T> responseType) {

        RestTemplate restTemplate = new RestTemplate();
        restTemplate.setErrorHandler(new ResponseErrorHandler());

        try {
            return ResponseEntity.ok(restTemplate.getForObject(url, responseType));
        } catch (ApiException e) {
            return ResponseEntity.status(e.getStatusCode()).body(e.getErrorResponse());
        }
    }

    private enum BarcodeType {
        IL, IR, BT, ILIR, ILBT
    }

    private class BarcodeResponse {
        private String barcodeimage;
        private String bluetoothcode;

        public String getBarcodeimage() { return barcodeimage; }
        public String getBluetoothcode() { return bluetoothcode; }
    }
}

class InstantLogin {

    @Autowired
    private SimpMessagingTemplate simpMessagingTemplate;

    @RequestMapping(value = "/instant-login", method = POST)
    private ResponseEntity<?> instantLogin(@RequestHeader String username,
                                           @RequestHeader String session,
                                           @RequestHeader String tracker) {

        HttpStatus status = Tracker.validate(tracker, username);
        if (status != OK) return ResponseEntity.status(status).body(null);

        simpMessagingTemplate.convertAndSend("/topic/instant-login/" + session, username);
        return ResponseEntity.ok(null);
    }
}


// Include this Javascript Code in your login page
const socket = new SockJS(`${BACKEND_URL}/socket`);
const stompClient = Stomp.over(socket);

stompClient.connect({}, () => {
    stompClient.subscribe(
        `/topic/instant-login/${getSession()}`,
        () => window.location = '/'
    );
});

def getbarcodeimage(self, sessionId):
   type = "IL"
   BarcodeURL = "%s/applications/%s/barcodes?session=%s&token=%s&type=%s" % (Constant.API_URL, Constant.APP_API_KEY, sessionId, self.appT.get(), type)
   barcode_image = requests.get(BarcodeURL)
   response = barcode_image.json()['barcodeimage']
   if barcode_image.status_code == 'EXPIRED_TOKEN':
       self.appT.invalidate()
       self.trackerValidation(trackerid, username)
   else:
       response
   return response


def GetBarcode():
      sessionId = uuid.uuid4()
      session['uid'] = str(sessionId)
      result = appService.getbarcodeimage(sessionId)
      print("AAAA")
      return result
app.jinja_env.globals.update(scanbarcode=GetBarcode)

@app.route('/login-post-url', methods=['POST'])
def empty_view():
   sessionID = request.headers.get('session')
   username = request.headers.get('username')
   trackerID = request.headers.get('tracker')
   result = appService.trackerValidation(trackerID, username)
   if result == True :
      socketio.emit('message', {'result': 'OK'}, room=clients[sessionID])
   else: print("Tracker is invalid.")
   content = ""
   return content, status.HTTP_200_OK

@socketio.on('connect')
def connected():
   socket_id = request.sid
   clients[session['uid']] = socket_id

@socketio.on('disconnect')
def disconnected():
   del clients[session['uid']]

# Login.html  

<script>
   $(function(){
     $("#barcodeImageGrid").attr('src' , "data:image/png;base64,{{ scanbarcode() }}");
   });
</script>

<script type="text/javascript" charset="utf-8">
var socket = io.connect('http://' + document.domain + ':' + location.port);
   socket.on('message', function( data) {
    console.log(data);
    if(data.result=='OK'){
       $(".alert-info").append('<strong>Login Successful.</strong>').show();
    }
   });
</script>

<?php
$_SESSION['barcode'] = AppMethods::getBarcode(session_id(),$_SESSION['Atoken'],'IL');


 public static function getBarcode($session,$token,$type){
        $url = AppMethods::$mydomain."/".AppMethods::$apiKey."/barcodes?type=$type&session=$session&token=$token";
        return AppMethods::AccManagment($url);
    }
public static function checkTrackerId($tracker,$user,$tokenm){
       $url = AppMethods::$mydomain."/".AppMethods::$apiKey."/trackers/$tracker?token=$tokenm&account=$user";
       return AppMethods::getHttpCode($url);
    }


    public function AccManagment($url){
        $ch  = curl_init($url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $data = json_decode(curl_exec($ch),true);
        $flag = curl_close($ch);
        if(isset($data['name'])){
        if($data['name'] == 'EXPIRED_TOKEN'){
            $_SESSION['Atoken'] = AppMethods::getApplicationToken();
            $_SESSION['Ctoken'] = AppMethods::getCompanyToken();
            AppMethods::AccManagment($url);
        }
    }
        return $data;
    }


if ($_SERVER['REQUEST_METHOD'] == "POST") {


         $headers = apache_request_headers();
             $username1=$headers['username'];
             $seassion=$headers['session'];
             $trackerID=$headers['tracker'];
         $sess = $seassion .'.json';

            $results = AppMethods::checkTrackerId($trackerID,$username1,$_SESSION['Atoken']);
                if($results==200){
                $jsonString = file_get_contents($sess);
                $data = json_decode($jsonString, true);
                $data[0]['user'] = "Logged in as $username1";

                foreach ($data as $key => $entry) {
                    if ($entry['user'] == 'false') {
                        $data[$key]['user'] = "Logged in as $username1";
                    }
                }
                $newJsonString = json_encode($data);
                file_put_contents($sess, $newJsonString);


                $_SESSION["Logged"] = "Logged in as $username1";
                http_response_code(200);
            }

}
if ($_SERVER['REQUEST_METHOD'] == "GET"){
   $id = session_id();
    $sess = "$id.json";
    if(file_exists($sess)){
        $jsonString = file_get_contents($sess);
        echo $jsonString;
    }

    else{
        echo "itemot e :$sess";
    }     
}
>

string bluetoothImageBT =GetBarcodeImage(Session["appToken"].ToString(), HttpContext.Current.Session.SessionID, "BT");
ltlProximity.Text = "<iframe name='we' id='12'  frameborder='no' scrolling='auto' height='200px' width='100%' src='"+ bluetoothImage + "' style='left:0; background-color:#B8B8B8;visibility: hidden;'></iframe>";

string bluetoothImageILBT =GetBarcodeImage(Session["appToken"].ToString(), HttpContext.Current.Session.SessionID, "ILBT");
ltlProximity2.Text = "<iframe name='we' id='13'  frameborder='no' scrolling='auto' height='200px' width='100%' src='"+ bluetoothImage + "' style='left:0; background-color:#B8B8B8;visibility: hidden;'></iframe>";


public static string GetBarcodeImage(string apptoken, string session, string type)
{
    string urlForBarcode = domain + "/rest/applications/" + apiKey + "/barcodes?type=" + type + "&session=" + session + "&token=" + apptoken;

    try
    {
        WebRequest reqForBarcode = WebRequest.Create(urlForBarcode);
        WebResponse resForBarcode = reqForBarcode.GetResponse();
        StreamReader readBarcode = new StreamReader(resForBarcode.GetResponseStream());
        string barcodeJsonString = readBarcode.ReadToEnd();

        if (!barcodeJsonString.Equals(""))
        {
            JToken barcodeJtoken = JObject.Parse(barcodeJsonString);
            if (barcodeJtoken.SelectToken("bluetoothcode") != null)
                return "saaspass://bluepass?" + (string)barcodeJtoken.SelectToken("bluetoothcode");
            else
                return "data:image/png;base64," + (string)barcodeJtoken.SelectToken("barcodeimage");
        }
        else
            return null;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    ErrMessage = reader.ReadToEnd();
                }
            }
        }
        return null;
    }
}

String bluetoothcode = ScanBarcode.barcodes(BarcodeType.BT, session);



<!-- include this snippet in your login page -->
<iframe src="${bluetoothcode}"
        style="display: none;">
</iframe>

import static app.error.RestErrorEnum.EXPIRED_TOKEN;

class PushLoginController extends ApiController {

    private static final Logger log = LoggerFactory.getLogger(PushLoginController.class);

    @Value("${saaspass.api.url}")
    private String spApiUrl;

    @Value("${saaspass.app.key}")
    private String spAppKey;

    @Autowired
    private ApplicationTokenService tokenService;

    @Autowired
    private RestTemplate restTemplate;

    @PostMapping("/push-login")
    private ResponseEntity<?> pushLogin(@RequestBody PushLoginRequest request) {
        return execute(request);
    }

    private ResponseEntity<?> execute(PushLoginRequest request) {

        ResponseEntity<?> r = execute(request, tokenService.getValue());

        if (r.getStatusCode() == FORBIDDEN) {
            ErrorResponse error = (ErrorResponse) r.getBody();
            if (error != null && error.getName() == EXPIRED_TOKEN) {
                r = execute(request, tokenService.getNewValue());
            }
        }

        return r;
    }

    private ResponseEntity<?> execute(PushLoginRequest request, String token) {

        try {
            String url = url(request, token);
            PushLoginResponse data = restTemplate.getForObject(url, PushLoginResponse.class);
            return ResponseEntity.ok(data);
        } catch (RestApiException e) {
            return ResponseEntity.status(e.getStatusCode())
                .body(e.getErrorResponse());
        }
    }

    private String url(PushLoginRequest request, String token) {

        String url = String.format(
            "%s/applications/%s/push?username=%s&session=%s&token=%s",
            spApiUrl,
            spAppKey,
            request.getUsername(),
            request.getSession(),
            token
        );

        log.info(url);

        return url;
    }
}

        public static bool PushLogin(string username, string session, string appToken)
        {
            string urlForPushLogin = domain + "/rest/applications/" + apiKey + "/push?username=" + username + "&session=" +session+ "&token=" + appToken;
            return CheckResponse(urlForPushLogin);
        }


        protected void pushLoginButton_Click(object sender, EventArgs e)
        {
            if (!username.Text.Equals(""))
            {
                try
                {
                    if (Session["appToken"] == null)
                    {
                        Session["appToken"] = AppMethods.GetApplicationToken();
                    }
                    else
                    {
                        string session = HttpContext.Current.Session.SessionID;
                        bool pushLogin = AppMethods.PushLogin(username.Text, Session["session"].ToString(), Session["appToken"].ToString());
                        if (pushLogin)
                        {
                            Session["username"] = username.Text.ToString();
                            ClientAdapter.Instance.Join(session);
                            Session["session"] = session;
                        }
                    }

                }
                catch (Exception) { }
            }
        }


public static bool CheckResponse(string url)
{
    try
    {
        WebRequest webRequest = WebRequest.Create(url);
        if (webRequest.GetResponse() != null)
        {
            HttpWebResponse response = (HttpWebResponse)webRequest.GetResponse();
            if (response.StatusCode == HttpStatusCode.OK)
            {
                if (response.GetResponseStream() != null)
                {
                    StreamReader reader = new StreamReader(response.GetResponseStream());
                    string jsonString = reader.ReadToEnd();
                    if (jsonString != null && !jsonString.Equals(""))
                    {
                        JToken tokenJtoken = JObject.Parse(jsonString);
                        ErrMessage = tokenJtoken.SelectToken("resultMessage") != null ? (string)tokenJtoken.SelectToken("resultMessage") : "";
                        ErrMessage += tokenJtoken.SelectToken("warning") != null ? " - " + (string)tokenJtoken.SelectToken("warning") : "";
                    }
                }
                return true;
            }
            else
                return false;
        }
        else
            return false;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    if (httpResponse.StatusCode.ToString()=="429")
                    {
                        ErrMessage = " X-Rate-Limit-Limit " + httpResponse.Headers["X-Rate-Limit-Limit"];
                        ErrMessage += " ### X-Rate-Limit-Remaining " + httpResponse.Headers["X-Rate-Limit-Remaining"];
                        ErrMessage += " ### X-Rate-Limit-Resets " + httpResponse.Headers["X-Rate-Limit-Resets"];
                    }
                    else
                        ErrMessage += reader.ReadToEnd();
                }
            }
        }
        return false;
    }
}
```csharp




##Single Sign-On

> Get SSO Login Request



```java
import static app.error.RestErrorEnum.EXPIRED_TOKEN;

class PushLoginController extends ApiController {

    private static final Logger log = LoggerFactory.getLogger(PushLoginController.class);

    @Value("${saaspass.api.url}")
    private String spApiUrl;

    @Value("${saaspass.app.key}")
    private String spAppKey;

    @Autowired
    private ApplicationTokenService tokenService;

    @Autowired
    private RestTemplate restTemplate;

    @PostMapping("/push-login")
    private ResponseEntity<?> pushLogin(@RequestBody PushLoginRequest request) {
        return execute(request);
    }

    private ResponseEntity<?> execute(PushLoginRequest request) {

        ResponseEntity<?> r = execute(request, tokenService.getValue());

        if (r.getStatusCode() == FORBIDDEN) {
            ErrorResponse error = (ErrorResponse) r.getBody();
            if (error != null && error.getName() == EXPIRED_TOKEN) {
                r = execute(request, tokenService.getNewValue());
            }
        }

        return r;
    }

    private ResponseEntity<?> execute(PushLoginRequest request, String token) {

        try {
            String url = url(request, token);
            PushLoginResponse data = restTemplate.getForObject(url, PushLoginResponse.class);
            return ResponseEntity.ok(data);
        } catch (RestApiException e) {
            return ResponseEntity.status(e.getStatusCode())
                .body(e.getErrorResponse());
        }
    }

    private String url(PushLoginRequest request, String token) {

        String url = String.format(
            "%s/applications/%s/push?username=%s&session=%s&token=%s",
            spApiUrl,
            spAppKey,
            request.getUsername(),
            request.getSession(),
            token
        );

        log.info(url);

        return url;
    }
}

<?php
public static function PushLogin($username,$ses,$token){
        $url = AppMethods::$mydomain."/".AppMethods::$apiKey."/push?username=$username&session=$ses&token=$token";
        return AppMethods::getHttpCode($url);
    }    




public function getHttpCode($url){
        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $data = json_decode(curl_exec($ch),true);
        $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
        return $httpcode;
    }



if(isset($_GET['pushLogin'])){
        $_SESSION['error'] = AppMethods::PushLogin($_GET['username'],session_id(),$_SESSION['Atoken']);
    }
>

class SingleSignOn {

    @RequestMapping(value = "/sso", method = GET)
    private ResponseEntity<?> sso(TrackerRequest request) {

        HttpStatus status = Tracker.validate(request.getTracker(), request.getAccount());

        if (status != OK) {
            // ... redirect to error page ...
            return r;
        }

        // ... sign the `account` in, and redirect ...

        return ResponseEntity.ok();
    }

    private class TrackerRequest {
        private String tracker;
        private String account;
        // ... getters and setters ...
    }
}

string tracker = Request.QueryString["tracker"];
string username = Request.QueryString["account"];
if (username!=null && !username.Equals(""))
{
    if (TrackerIdValidation(username, tracker, GetApplicationToken()))
    {
        Session["username"] = username;
        Response.Redirect("/Default.aspx");

    }
    else
    {
        Response.Write("tracker data or account information cannot get.");
    }
}


public static bool TrackerIdValidation(string username, string trackers, string appToken)
{
    string urlForTracker = "https://www.saaspass.com/sd/rest/applications/" + apiKey + "/trackers/" + trackers + "?token=" + appToken + "&account=" + username;
    return CheckResponse(urlForTracker);
}


public static bool CheckResponse(string url)
{
    try
    {
        WebRequest webRequest = WebRequest.Create(url);
        if (webRequest.GetResponse() != null)
        {
            HttpWebResponse response = (HttpWebResponse)webRequest.GetResponse();
            if (response.StatusCode == HttpStatusCode.OK)
            {
                if (response.GetResponseStream() != null)
                {
                    StreamReader reader = new StreamReader(response.GetResponseStream());
                    string jsonString = reader.ReadToEnd();
                    if (jsonString != null && !jsonString.Equals(""))
                    {
                        JToken tokenJtoken = JObject.Parse(jsonString);
                        ErrMessage = tokenJtoken.SelectToken("resultMessage") != null ? (string)tokenJtoken.SelectToken("resultMessage") : "";
                        ErrMessage += tokenJtoken.SelectToken("warning") != null ? " - " + (string)tokenJtoken.SelectToken("warning") : "";
                    }
                }
                return true;
            }
            else
                return false;
        }
        else
            return false;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    if (httpResponse.StatusCode.ToString()=="429")
                    {
                        ErrMessage = " X-Rate-Limit-Limit " + httpResponse.Headers["X-Rate-Limit-Limit"];
                        ErrMessage += " ### X-Rate-Limit-Remaining " + httpResponse.Headers["X-Rate-Limit-Remaining"];
                        ErrMessage += " ### X-Rate-Limit-Resets " + httpResponse.Headers["X-Rate-Limit-Resets"];
                    }
                    else
                        ErrMessage += reader.ReadToEnd();
                }
            }
        }
        return false;
    }
}

///This block of code should be in ExampleRegistration.aspx, which page in the barcode.
protected void getRegistrationBarcode_Click(object sender, EventArgs e)
{
    if (Session["appToken"] != null && !Session["appToken"].Equals(""))
    {
        registerBarcode.ImageUrl = null;
        string session = HttpContext.Current.Session.SessionID;
        registerBarcode.ImageUrl = AppMethods.GetBarcodeImage(Session["appToken"].ToString(), session, "IR");
        ClientAdapter.Instance.Join(session);
        Session["sessionIR"] = session;
    }
    else
    {
        Response.Write("Session Expired!");
        Response.Redirect("/Login.aspx");
    }
}

protected void getRegistrationAndLoginBarcode_Click(object sender, EventArgs e)
{
    if (Session["appToken"] != null && !Session["appToken"].Equals(""))
    {
        registerBarcode.ImageUrl = null;
        string session = HttpContext.Current.Session.SessionID;
        registerBarcode.ImageUrl = AppMethods.GetBarcodeImage(Session["appToken"].ToString(), session, "ILIR");
        ClientAdapter.Instance.Join(session);
        Session["sessionIR"] = session;
    }
    else
    {
        Response.Write("Session Expired!");
        Response.Redirect("/Login.aspx");
    }
}


///This block of code should be in ExampleInstantRegistration.aspx, which page's url is Instant Post URL .
public static string GetBarcodeImage(string apptoken, string session, string type)
{
    string urlForBarcode = domain + "/rest/applications/" + apiKey + "/barcodes?type=" + type + "&session=" + session + "&token=" + apptoken;

    try
    {
        WebRequest reqForBarcode = WebRequest.Create(urlForBarcode);
        WebResponse resForBarcode = reqForBarcode.GetResponse();
        StreamReader readBarcode = new StreamReader(resForBarcode.GetResponseStream());
        string barcodeJsonString = readBarcode.ReadToEnd();

        if (!barcodeJsonString.Equals(""))
        {
            JToken barcodeJtoken = JObject.Parse(barcodeJsonString);
            if (barcodeJtoken.SelectToken("bluetoothcode") != null)
                return "saaspass://bluepass?" + (string)barcodeJtoken.SelectToken("bluetoothcode");
            else
                return "data:image/png;base64," + (string)barcodeJtoken.SelectToken("barcodeimage");
        }
        else
            return null;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    ErrMessage = reader.ReadToEnd();
                }
            }
        }
        return null;
    }
}

class InstantRegister {

    @Autowired
    private SimpMessagingTemplate simpMessagingTemplate;

    @RequestMapping(value = "/instant-registration", method = POST)
    private ResponseEntity<?> instantRegister(@RequestHeader String username,
                                              @RequestHeader String session,
                                              @RequestHeader String tracker) {

        HttpStatus status = Tracker.validate(tracker, username);
        if (status != OK) return ResponseEntity.status(status).body(null);

        simpMessagingTemplate.convertAndSend("/topic/instant-registration/" + session, username);
        return ResponseEntity.ok(null);
    }
}

// Include this Javascript Code in your login page
const socket = new SockJS(`${BACKEND_URL}/socket`);
const stompClient = Stomp.over(socket);

stompClient.connect({}, () => {
    stompClient.subscribe(
        `/topic/instant-registration/${getSession()}`,
        () => window.location = '/'
    );
});

<key>CFBundleURLTypes</key>
<array>
    <dict>
        <array>
            <key> CFBundleURLSchemes</key>
            <string>saaspasssdk-appKey-urlSchemeSuffix</string>
        </array>
    </dict>
</array>

<key>CFBundleURLTypes</key>
<array>
<dict>
<array>
<key> CFBundleURLSchemes</key>
<string>saaspasssdk-123456789-testVersion</string>
</array>
</dict>
</array>

<key>LSApplicationQueriesSchemes</key>
<array>
<string>saaspass-auth</string>
</array>

// AppDelegate.m
#import <SaasPassSDK/SaasPassSDK.h>

-(BOOL)application:(UIApplication *)application openURL:(NSURL *)url sourceApplication:(NSString *)sourceApplication annotation:(id)annotation {

return [[SPSDKManager sharedInstance] application:application openURL:url sourceApplication:sourceApplication annotation:annotation];
}

// Add this to the header file, e.g. in ViewController.h
#import <SaasPassSDK/SaasPassSDK.h>

// Add this delegate into your view controller
@interface ViewController : UIViewController <SPSDKLoginButtonDelegate>

// Add this to the header of your file, e.g. in ViewController.m
// after #import "ViewController.h"
// Add this to the body

@implementation ViewController

- (void)viewDidLoad {
[super viewDidLoad];
// Add a SAASPASS-branded login button to your app
SPSDKLoginButton *loginButton = [[SPSDKLoginButton alloc] init];
// Set delegate for SPSDKLoginButton
loginButton.delegate = self;
// Optional: Place the button in the center of your view.
loginButton.center = self.view.center;
[self.view addSubview:loginButton];

}
@end

//Method for received results from login action

-(void) loginButton:(SPSDKLoginButton *)loginButton

didCompleteWithResult:(SPSDKLoginResult *)result withError:(NSError*)error

{
if (error) {
//Process error
} else if (result.isCanceled) {
//Cancelled
}else {
//Logged in
}
}

// Add this delegate into your Application Delegate
@interface AppDelegate : UIResponder <UIApplicationDelegate, SPSDKManagerDelegate>
// Add this on your applicationDidFinishLaunchingWithOptions method
-(BOOL)application:(UIApplication *)application
didFinishLaunchingWithOptions:(NSDictionary *)launchOptions {
// Set delegate method for SPSDKManager
[SPSDKManager sharedInstance].delegate = self;
}

//Method for handling 'Open In Mobile App' requests
-(void) didLoginRequestReceivedWithResult:(SPSDKLoginResult *)result
withError:(NSError*)error
{
if (error) {
//Process error
} else {
//Log user in
}
}

repositories{
    flatDir {
        dirs 'libs'
    }
}

compile(name:'saaspassSDK', ext:'aar')

<activity android:name="com.example.custom.MainActivity" android:label="@string/app_name">
<intent-filter>
<action android:name="android.intent.action.VIEW" />
<category android:name="android.intent.category.DEFAULT" />
<category android:name="android.intent.category.BROWSABLE" />
<data android:scheme="saaspasssdk-applicationKey" />
</intent-filter>
</activity>

<activity android:name="com.example.custom.MainActivity" android:label="@string/app_name">
<intent-filter>
<action android:name="android.intent.action.MAIN" />
<category android:name="android.intent.category.LAUNCHER" />
</intent-filter>
<intent-filter>
<action android:name="android.intent.action.VIEW" />
<category android:name="android.intent.category.DEFAULT" />
<category android:name="android.intent.category.BROWSABLE" />
<data android:scheme="saaspasssdk-applicationKey" />
</intent-filter>
</activity>

<com.saaspass.widget.SaasPassLoginButton"
android:id="@+id/btnlogin"
android:layout_width="match_parent"
android:layout_height="wrap_content"
android:layout_alignParentBottom="true"
android:layout_centerHorizontal="true"/>

import com.saaspass.controller.SaasPassInitializer;
import com.saaspass.interfaces.SaasPassCallback;
import com.saaspass.login.LoginResult;
import com.saaspass.widget.SaasPassLoginButton;

private SaasPassLoginButton loginButton;

private SaasPassInitializer saasPassInitializer;

saasPassInitializer = new SaasPassInitializer(this);
loginButton = (SaasPassLoginButton) findViewById(R.id.btnlogin);
loginButton.setOnClickListener(this);

loginButton = (SaasPassLoginButton) findViewById(R.id.btnlogin);
loginButton.setOnClickListener(this);
saasPassInitializer.login(this, new SaasPassCallback <LoginResult>() {
@Override
public void onLoadFinishCallback(LoginResult result) {
username = result.getUsername();
trackerId = result.getTrackerId();
//after getting username and trackerId handle the login process
}
@Override
public void onCancel() {
Toast.makeText(getApplicationContext(), "Action Canceled!",Toast.LENGTH_SHORT).show();
}
@Override
public void onError(String error) {
Toast.makeText(getApplicationContext(), error, Toast.LENGTH_SHORT).show();
}
});

saasPassInitializer.initCallback(this, appKey);

keytool -exportcert -alias androiddebugkey -keystore ~/.android/debug.keystore | openssl sha1 -binary | openssl base64

keytool -exportcert -alias androiddebugkey -keystore %HOMEPATH%\.android\debug.keystore | openssl sha1 -binary | openssl base64

public static bool AddAccount(string username, string grouplist, string accountowner, string companytoken)
{
    string urlForAddAcount = "https://www.saaspass.com/sd/rest/" + companyKey + "/addaccount?username=" + username + "&grouplist=" + grouplist + "&accountowner=" + accountowner + "&token=" + companytoken;
    return CheckResponse(urlForAddAcount);
}

public static bool CheckResponse(string url)
{
    try
    {
        WebRequest webRequest = WebRequest.Create(url);
        if (webRequest.GetResponse() != null)
        {
            HttpWebResponse response = (HttpWebResponse)webRequest.GetResponse();
            if (response.StatusCode == HttpStatusCode.OK)
            {
                if (response.GetResponseStream() != null)
                {
                    StreamReader reader = new StreamReader(response.GetResponseStream());
                    string jsonString = reader.ReadToEnd();
                    if (jsonString != null && !jsonString.Equals(""))
                    {
                        JToken tokenJtoken = JObject.Parse(jsonString);
                        ErrMessage = tokenJtoken.SelectToken("resultMessage") != null ? (string)tokenJtoken.SelectToken("resultMessage") : "";
                        ErrMessage += tokenJtoken.SelectToken("warning") != null ? " - " + (string)tokenJtoken.SelectToken("warning") : "";
                    }
                }
                return true;
            }
            else
                return false;
        }
        else
            return false;
    }
    catch (WebException e)
    {
        using (WebResponse response = e.Response)
        {
            HttpWebResponse httpResponse = (HttpWebResponse)response;
            if (httpResponse != null)
            {
                using (Stream data = response.GetResponseStream())
                using (var reader = new StreamReader(data))
                {
                    if (httpResponse.StatusCode.ToString()=="429")
                    {
                        ErrMessage = " X-Rate-Limit-Limit " + httpResponse.Headers["X-Rate-Limit-Limit"];
                        ErrMessage += " ### X-Rate-Limit-Remaining " + httpResponse.Headers["X-Rate-Limit-Remaining"];
                        ErrMessage += " ### X-Rate-Limit-Resets " + httpResponse.Headers["X-Rate-Limit-Resets"];
                    }
                    else
                        ErrMessage += reader.ReadToEnd();
                }
            }
        }
        return false;
    }
}

import org.springframework.http.ResponseEntity;
import org.springframework.web.client.RestTemplate;

public class AddAccount {

    private static final String API_URL = "https://www.saaspass.com/sd/rest";

    public SpResponse addaccount(String username, String accountowner, List<String> groups) {
        String grouplist = String.join(",", groups);
        String url = "%s/%s/addaccount?username=%s&accountowner=%s&grouplist=%s&token=%s";
        url = String.format(url, API_URL, COMPANY_KEY, username, accountowner, grouplist, getCompanyToken());
        ResponseEntity<?> r = call(url, SpResponse.class);
        return r.getStatusCode() == OK ? (SpResponse) r.getBody() : null;
    }

    private <T> ResponseEntity<?> call(String url, Class<T> responseType) {

        RestTemplate restTemplate = new RestTemplate();
        restTemplate.setErrorHandler(new ResponseErrorHandler());

        try {
            return ResponseEntity.ok(restTemplate.getForObject(url, responseType));
        } catch (ApiException e) {
            return ResponseEntity.status(e.getStatusCode()).body(e.getErrorResponse());
        }
    }
}

public class SpResponse {

    private String resultMessage;
    private boolean isVerified;
    private boolean isPendingOnEmail;
    private boolean isAccountOwnerBlocked;
    private String warning;

    public String getResultMessage() { return resultMessage; }
    public boolean getIsVerified() { return isVerified; }
    public boolean getIsPendingOnEmail() { return isPendingOnEmail; }
    public boolean getIsAccountOwnerBlocked() { return isAccountOwnerBlocked; }
    public String getWarning() { return warning; }
}

def addAccount(self, username, accountowner, grouplist):
   url = "%s/%s/addaccount?username=%s&accountowner=%s&grouplist=%s&token=%s" % (Constant.API_URL, Constant.COMPANY_KEY, username, accountowner, grouplist, self.companyToken.get())
   response = requests.get(url)
   if response.status_code == 'EXPIRED_TOKEN':
       self.companyToken.invalidate()
       self.addAccount(username, accountowner, grouplist)
   else:
       response.json()
   return response.json()



@app.route('/dashboard', methods=['GET', 'POST'])
def AddAccount():
   form = AddAccountForm(request.form)
   if request.method == 'POST' and form.validate_on_submit():
      result = companyService.addAccount(form.username.data, form.accountowner.data, form.grouplist.data)
      flash(result)
   return render_template('dashboard.html', title='Dashboard_AddNewAccount', form=form)

<?php
public static function AddAccount($uname, $grouplist, $accountowner1, $companytoken){
       $url = AppMethods::$myDom."/".AppMethods::$companyKey."/addaccount?username=$uname&grouplist=$grouplist&accountowner=$accountowner1&token=$companytoken";
       return AppMethods::AccManagment($url);
   }


public function AccManagment($url){
        $ch  = curl_init($url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $data = json_decode(curl_exec($ch),true);
        $flag = curl_close($ch);
        if(isset($data['name'])){
        if($data['name'] == 'EXPIRED_TOKEN'){
            $_SESSION['Atoken'] = AppMethods::getApplicationToken();
            $_SESSION['Ctoken'] = AppMethods::getCompanyToken();
            AppMethods::AccManagment($url);
        }
    }
        return $data;
    }
>