PHP and WordPress Single Sign On (SSO) with optional JWT Addon

luceos

maicol07 that would be a great idea, thanks for clarifying 👍️ Once you publish your version feel free to ping me so I can mark the flagrow one abandoned and replaced with yours 😉

ctml

maicol07

I'm testing with postman, and I realize this is not the SSO plugin but rather flarums api itself but I am getting the 401 unauthenticated using the master token I created.

POST /api/token
Headers:

Token: <api_keys_table_token>
userId: 1 <- tried with and without this field

{
    "errors": [
        {
            "status": "401",
            "code": "not_authenticated"
        }
    ]
}

maicol07

ctml you need to set an Authorization header to your master token and your JSON body to:

{
  "identification" : "myusername",
  "password" : "mypassword",
  "lifetime" : "3600"
}

You can change 3600 to another value if you want

ctml

maicol07

I see that now, thanks. Looks like the 401 is expected for the token since the user doesn't exist, after the 401 the signup is attempted. Unfortunately I now see that the signup fails because my website usernames allows periods, but flarum does not.

/api/users` resulted in a `422 Unprocessable Entity` response:
{"errors":[{"status":"422","code":"validation_error","detail":"The username may only contain letters, numbers, and dashe (truncated...)

I cannot change my usernames, so I'll have to figure out of there is anyway around this limitation of flarum.

maicol07

ctml you should edit that in Flarum core files, but that is not a good way to do it. It can be better to replace all the usernames dots and special characters with a - when registering the user (or maybe removing them completely).
A change in the next betas is the best choice, but I don't know if developers want.

ctml

Thanks, you're a gentleman and a scholar! I appreciate all the quick replies over the past 24h, it is all working now. Although I don't love substituting dashes, it has nothing to do with the SSO and is a limitation of flarum, there is another thread about supported characters in usernames so I will carry on over there 🙂 Very excited to start using it now that I can integrate all my users.

Sarveshmrao

I get a error when logging in from my dashboard it says
Fatal Error: Class 'Flarum' is not found in .......blah blah blah
Please let me know what I should do.

maicol07

Sarveshmrao Have you imported the class with use?

Sarveshmrao

Thanks for your swift reply.
This is my code.

.
.
.
.
.
if ($_GET['src']=="comm") {
require_once(__DIR__ .'/vendor/autoload.php'); **// I even tried writing this line and the next line at the start of the file**
require_once('vendor/maicol07/flarum-sso-plugin/src/Flarum.php');
// Create the Flarum object with the required configuration. The parameters are explained in the class file (src/Flarum.php)
$forum = new Flarum('FORUM URL', 'ROOT DOMAIN', 'SOME RANDOM LETTERS', 'AGAIN SOME RANDOM LETTERS'); **//In this line is the error**
    // Login the user with username, email and password (if user is already signed up in Flarum before using this extension)
	// If user doesn't exists in Flarum, it will be created
    $forum->login($_SESSION['name'], $email, $_POST['password']);
    // Redirect to Flarum
    $forum->redirectToForum();
} elseif (!$_SESSION['name'] || !$_POST['password']) {
    echo 'Login failed';
}
.
.
.
.
.

maicol07

Sarveshmrao you can remove the second require. Then, before the new Flarum ...add use Maicol07\Flarum; (check your IDE for auto completion)

Sarveshmrao

This is the error I get now.
Fatal error: Uncaught Error: Class 'maicol07\Flarum' not found

maicol07

Sarveshmrao note the M is uppercase

Sarveshmrao

maicol07 now this is the error.
Fatal error: Uncaught Error: Class 'Maicol07\Flarum' not found

maicol07

Sarveshmrao sorry, I've checked:
this should be correct: use Maicol07\SSO\Flarum;

Sarveshmrao

maicol07 Now I get this error.
Fatal error: Uncaught GuzzleHttp\Exception\ConnectException: cURL error 35: error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error (see https://curl.haxx.se/libcurl/c/libcurl-errors.html)

maicol07

Sarveshmrao that's a curl error. In the link the error references the error 35 equals to:

CURLE_SSL_CONNECT_ERROR (35)
A problem occurred somewhere in the SSL/TLS handshake. You really want the error buffer and read the message there as it pinpoints the problem slightly more. Could be certificates (file formats, paths, permissions), passwords, and others.

So check your SSL certificates. As last resort, enable the insecure option: https://docs.maicol07.it/docs/en/flarum_sso/plugin/config

Sarveshmrao

maicol07 I have a SSL cert from CloudFlare. But I still get that error. How to get this to work? and also I was not able to get the unsecured option work. Still I got that error.

maicol07

Release 1.2.1 - PHP Plugin

This release fixes a bug for newer installations

Changelog

Major changes are marked with ❗️

🐛 Fixes

Unknown class error on new installations
- Fully fixed in 1.2.2 (there was a typo)

Installing

Read the docs

Upgrading

Read the docs