@cbnsndwch/ghl-app-template
A base template for full-stack HighLevel Marketplace apps
Table of Contents
Getting Started
:warning: This project requires a recent version of NodeJS installed on your machine. The current LTS version is NodeJS 20.x but you should be OK using NodeJS 18.x until the end of the maintenance period in April 2025.
For more information on NodeJS LTS releases, see the NodeJS Release Schedule.
Create a new repository from this template
Then, clone your new repository on your dev machine and install the dependencies:
git clone https://github.com/{YOUR_GITHUB_USERNAME}/ghl-app-template
cd ghl-app-template
yarn
Open the directory in VSCode:
code .
To start the development server with the debugger attached run the Debug API
launch configuration. Alternatively, change to the apps/server
directory and run the following command:
yarn dev
Usage
Work in progress...
API Routes
Work in progress...
SSO (iframe integration)
This section illustrates the process of authenticating a user in the context of a GHL Marketplace App's Custom Pages, by using the new GHL SSO feature. The SSO flow works as follows:
- The user navigates to the GHL App under the Marketplace menu.
- The GHL App loads the Custom Page in an iframe.
- The Custom Page requests the SSO session info from the GHL App by sending a cross-frame message.
- The GHL App requests the SSO session info from the GHL Server, passing the app's Client ID.
- The GHL Server uses the app's SSO Token to encrypt the SSO session info and returns it to the GHL App.
- The GHL App returns the encrypted SSO session info to the Custom Page by sending a response cross-frame message.
- The Custom Page sends the encrypted SSO session info to the Marketplace App's back-end. The back-end decrypts the SSO session info using the app's SSO Token. Perform app-specific autjorization logic here, like checking if the user, location, or agency is allowed to access the Marketplace.
- The back-end returns the decrypted SSO session info to the Custom Page along with any relevant app-specific data.
- The Custom Page now has access to the user's SSO session info and can use it to show content or provide functionality that is user-, location-, or agency-specific.
For a reference implementation see the code in apps/server/public/js/ghl.mjs
.
License
This project is licensed under the MIT License.