跨顶级域名单点登录

const express = require('express');
const app = express();
const cors = require('cors');

app.use(cors({
  origin: 'https://example.com',
  credentials: true
}));

app.get('/data', (req, res) => {
  res.json({ message: 'Hello from another domain!' });
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});

from flask import Flask, request, jsonify
import jwt

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your_secret_key'

@app.route('/login', methods=['POST'])
def login():
    token = jwt.encode({'user': 'example_user'}, app.config['SECRET_KEY'], algorithm='HS256')
    return jsonify({'token': token})

@app.route('/protected', methods=['GET'])
def protected():
    token = request.headers.get('Authorization').split()[1]
    try:
        data = jwt.decode(token, app.config['SECRET_KEY'], algorithms=['HS256'])
        return jsonify({'message': f'Hello, {data["user"]}!'})
    except jwt.ExpiredSignatureError:
        return jsonify({'error': 'Token has expired'}), 401
    except jwt.InvalidTokenError:
        return jsonify({'error': 'Invalid token'}), 401

if __name__ == '__main__':
    app.run(debug=True)