Integration Test Scenarios
WEBSITE DRIVEN LOGIN FLOW
- User logs in to the main website.
- User clicks on a link that leads to the white-label site.
- White-label site requires login credentials of the user - which are not found in the current session
- So Zoho Analytics routes the request to the registered login URL with a parameter called serviceurl that will contain the full URL where the request should be routed after login (e.g.,
https://finepick.com/login?serviceurl=https://analytics.finepick.com
) - Since user is already logged in, finepick.com performs the sign in or sign up API call, depending on whether finepick.com already has the zuid for the user or not.
- With the newly generated url, finepick.com routes the user’s browser to the service URL (in this example,
https://analytics.finepick.com/oauthorize?zacode=[obtained_ticket]&portal=[portal_id]&state=https://analytics.finepick.com/ZDBHome.cc
) - Now white label site recognizes the user.
WHITE LABEL DRIVEN LOGIN FLOW
- User visits the white label domain directly.
- If no login credentials for the user is found, then Zoho Analytics will route the user the registered login url with a parameter called serviceurl. Serviceurl contains the full URL where the request should be routed to after login (for eg.
https://finepick.com/login?serviceurl=https://analytics.finepick.com
) - The login page of finepick.com, collects and processes the user’s login credentials based on the data stored in finepick.com
- After succesfully logging the user into finepick.com, if the service URL is a white label URL, the server should invoke the Sign in or Sign up API for the current logged in user, and obtain a redirect url.
- After successfully obtaining the redirect url, the user’s browser should be forwarded to the url denoted by service url (in this example,
https://analytics.finepick.com/oauthorize?zacode=[obtained_ticket]&portal=[portal_id]&state=https://analytics.finepick.com/ZDBHome.cc
) - Now the white label site (Zoho Analytics) recognizes the user.
WEBSITE LOGOUT FLOW:
- When the user clicks on the logout URL in the website, the website should call the Zoho Analytics signout API and invalidate the ticket.
- The signout API call is a must!
WHITE -LABEL LOGOUT FLOW:
- When the user logs out from the reports site, he will be routed to the logout URL of the main site with the serviceurl parameter pointing to the community URL
- Zoho will automatically clear all cookies and session information about the user from Zoho’s end.