MojoAuth vs SSOJet: consumer login vs enterprise SSO

import { MojoAuth } from "@mojoauth/server-sdk";

const mojo = new MojoAuth({ apiKey: process.env.MOJOAUTH_API_KEY });

await mojo.email.sendOtp({ email: "user@example.com" });
const { user, accessToken } = await mojo.email.verifyOtp({
  email: "user@example.com",
  otp: req.body.otp,
});

// Representative OIDC/SSO flow. SSOJet exposes standards-based
// SAML/OIDC endpoints plus SDKs — confirm exact API in their docs.

// 1. Redirect the user to SSOJet's authorize endpoint
const authUrl =
  "https://auth.ssojet.com/authorize" +
  "?client_id=" + process.env.SSOJET_CLIENT_ID +
  "&redirect_uri=https://app.example.com/sso/callback" +
  "&response_type=code&scope=openid%20profile%20email";

// 2. On callback, exchange the code for tokens at /token
const res = await fetch("https://auth.ssojet.com/token", {
  method: "POST",
  body: new URLSearchParams({ /* code, client_id, secret, ... */ }),
});
const { id_token, access_token } = await res.json();