Call the API

When you have designed and saved your widget, added the code to your website, and implemented Authentication, the final step is for you to configure the widget on the Call the API page.

Figure 1: Call the API

To complete the widget implementation:

1. If you haven’t done so yet, replace the placeholder in the widget JavaScript code with the Token URL.
2. Add the Token URL to your application whitelist (See Figure 2). For security reasons, only whitelisted domains are allowed to communicate with the Token URL. Enter the domain, and click the Save button.
3. Make sure your Token URL, or other page, (created during the Authentication step) has been configured to do the following:

• Extract the token parameter from the POST data.
• Use the token to make the auth_info API call to https://rpxnow.com/api/v2/auth_info, using the apiKey and token extracted from the POST data.
• Parse the response and extract the identifier.

Figure 2: Add your domain to the Whitelist

You can now test your Social Sign-in widget.

Testing the Widget ¶

The Dashboard includes a widget testing tool. You can get to the testing tool in two ways:

• On the Configure Widget page, use the link at the top of the screen. (This link appears when you save configuration changes.)
• On the Call the API page, use the link on the right side of the screen.

The testing tool implements the widget as you configured it, allowing you to simulate a sign-in and retrieve the user profile from the identity provider.

Figure 3: Widget Testing Tool

After you retrieve the profile, you can fill in the token URL and test your own code for retrieving the user profile.