# Sync SSO node.js implementation

**URL:** <https://meta.discourse.org/t/sync-sso-node-js-implementation/168333>\
**Category:** SSO\
**Created:** [October 26, 2020, 11:26am UTC](https://meta.discourse.org/t/sync-sso-node-js-implementation/168333 "2020-10-26T11:26:57Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![zcuric](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zcuric/32/292837_2.png) [@zcuric](https://meta.discourse.org/u/zcuric)\
**Post date:** [October 26, 2020, 11:26am UTC](https://meta.discourse.org/t/sync-sso-node-js-implementation/168333/1 "2020-10-26T11:26:57Z")

</div>

Here is example with **NodeJS** if anyone needs it:

```js
'use strict';

const axios = require('axios');
const crypto = require('crypto');
const qs = require('querystring');
const config = require('./config');

function getHash(data, secret) {
  return crypto.createHmac('sha256', secret)
    .update(data)
    .digest('hex');
}

function syncSso() {
  const endpoint = `${config.discourse.url}/admin/users/sync_sso`;
  const params = {
    external_id: 1,
    email: 'bob@example.com',
    username: 'bob',
    add_groups: 'eurorack',
    require_activation: true
  };
  const headers = {
    'Api-Key': config.discourse.apiKey,
    'Api-Username': config.discourse.apiUsername,
    'Content-Type': 'multipart/form-data'
  };
  const sso = Buffer.from(qs.stringify(params)).toString('base64');
  const sig = getHash(sso, config.discourse.ssoSecret);
  return axios.post(endpoint, qs.stringify({ sso, sig }), { headers })
    .then(({ data }) => data)
    .catch(err => err);
}

```

---

_[View the full topic](https://meta.discourse.org/t/sync-sso-node-js-implementation/168333)._
