Authentication trough user profile, exchenge navegation time for point exchange

[WIFInoob]

Hi community, 

We have a loyalty platform that gives points/rewards, and we want to allow the user to exchange their points for wifi conection time though or own portal. We want the user to connect to our plaform without having access to the rest of web, and only allow him to connect fully when he exchanges 10 points for 10 minutes of navegation. any idea the architecture o how to do it?

We have a Radius Server EC2 in AWS and the landing S3 using angular.

Anything will help

[HodyCrouch]

You've probably already found this document.  Make sure you start here: https://meraki.cisco.com/lib/pdf/meraki_whitepaper_captive_portal.pdf

Look at the "EXCAP Overview - Sign-on Splash" section, which is pretty close to your use case.

You can use the Walled Garden settings on your SSID to allow the user to interact with your site (to login and use their credits) while not providing access to everything else.

You will need a back-end application to serve the captive portal pages, handle login, do the points exchange, terminate the session when the time limit is reached, and confirm authentication via RADIUS.