First of developer need a user account on Qloudid and he must be a employee of the company on Qloudid for the company he want to generate API URL. Then he needs to go to
https://www.qloudid.com/company/index.php/AppsList/appsAccount/"Company_id"
if developer already have a developer account he will see list of API's created or he will be asked to request a developer account. After approval of suport team he can continue with following
- If he want to generate new client id he can click on + and go to :
- https://www.qloudid.com/company/index.php/CreateApps/appsAccount/"Company_id"
- Here he can select which API URL he wants to generate. App name here must be unique i.e. not used by other user or company. Redirect URL is the one where developer wants to redirect after sign in that he have selected will be completed.
- After submitting the data a new Client id and password will be generated for developer and a tiny URL will be provided to him that he can use on their domain to login with Qloudid.
- When a user want to signin on their web using Qloud ID they click on sign in button. Here user need to provide the API generated for the sign in work
- https://www.qloudid.com/walk/authorize.php?response_type=code&client_id='.$client_id.'&state=xyz&signin=1
- On this link user need to add client id
- User need to scan the QR code by api on this page and provide his consent for the sign in
- After successful submission of consent user is redirected to added URL
- On qmathup for now we are redirecting on : https://www.qmatchup.com/applyjob/SignInDemo.php
- From Qmatchup user need to send request to https://www.qloudid.com/walk/token.php using client id and secret key to generate access token.
- Following details are required in request:
- $fields = ['grant_type'=>'authorization_code','code' => $_GET['code'],'client_id'=>$username, 'client_secret'=>$password] here username is client id and password id secret key
- $headers = array('PHP_AUTH_USER' => 'username' , 'PHP_AUTH_PW' => 'password'); here username is client id and password id secret key
- As soon as access tokan is received on qmatchup side they need to send the same to https://www.qloudid.com/walk/resource_signin.php?signin=1 using curl request
- Here on this Qmatchup is rechecking before they make user logged that if user is not making a cheat and opening URL directly. So they re-verify from their client id and password and user detail from Qloudid.
- This is two way handshaking process used on Qmatchup and Qloudid domain. So they can verify user login securely. Other domains using our API can work as per their requirement they can use two way handshaking or can make user logged in directly after receiving data from Qloudid.
- Data will be sent in json in below format :
{"type":"signin","first_name":"Ram","last_name":"kumar","email":"x@x.com",
"country_of_residence":"100","seller_company_id":1, "user":1}
- Note:- Sign in API is in demo mode for now from Qmatchup to test the API we use url: https://www.qmatchup.com/applyjob/SignInDemo.php