Sign in with your Morr Store account

This product has no accounts of its own. It asks the core: "is this user allowed in?"

// Drop this into any of your SaaS products.
// 1) Authenticate the user against Morr Store core:
const res = await fetch("https://access.morrstore.com/api/sso/login", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ email, password, product_slug: "demo-product" }),
});
const { token, user, access, entitlements } = await res.json();
// 'access' tells you if this user may use THIS product. Gate your app on it.
if (!access) return showPaywall();

// 2) Later, verify a token you already hold (e.g. on each request):
const v = await fetch("https://access.morrstore.com/api/sso/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ token, product_slug: "demo-product" }),
}).then(r => r.json());      // -> { valid, user, entitlements, access }

// 3) Report activity so inactivity monitoring stays accurate:
await fetch("https://access.morrstore.com/api/activity", {
  method: "POST",
  headers: { "Content-Type": "application/json", "Authorization": "Bearer " + token },
  body: JSON.stringify({ product_slug: "demo-product" }),
});

Replace product_slug with the slug of the product you're gating. The core enforces all access server-side — your product just trusts the answer.