OpenID Connect example
This app uses Tiquo as its identity provider. One sign-in gives it the member's profile and memberships, ready to unlock members-only features.
Members sign in on Tiquo's branded page with a code sent to their email. No passwords to manage.
The tokens carry the member's customer profile, current memberships and has_active_membership.
Tokens refresh every hour and re-read memberships, so a cancellation shows up without a new sign-in.
The app sends the member to Tiquo's sign-in page (OpenID Connect with PKCE, state and nonce).
Tiquo matches the email to the club's customer profile, or creates one, and returns a code.
The app exchanges the code for tokens and reads the member's profile and memberships.