PHP and WordPress Single Sign On (SSO) with optional JWT Addon

maicol07

dartrax will be done! At the moment the server is down for maintenance

richstandbrook

Have I missed something? — trying to register a Flarum user once they have registered with the SSO, but the User::signup() method is private so I can't call it

$flarumUser =new Maicol07\SSO\User('user', $flarum);

$flarumUser->email = 'user@example.com';
$flarumUser->password = 'password';

$flarumUser->signup();

maicol07

richstandbrook the initial thought was that you can use the login method in both ways (if the plugin doesn't find the user in Flarum, it creates it), but you're right: it should be public in order to sign up users programmatically. Here is the tracker issue about this: FSSOE-17.

In the meantime you can use the login() method or changing manually the method visibility

richstandbrook

maicol07 Thanks man, that makes sense. Not sure what I'm doing wrong (except trying to program while surrounded by kids and helping them with lessons). Now I'm getting this error:

Client error: `POST http://community.thehackspace.test/api/token` resulted in a `405 Method Not Allowed`

I have the API key in the api_keys table along with the user_id any other thought what I might have missed.

I've really appreciated your help figuring this out, thank you

richstandbrook

maicol07 never mind, looks like I had http rather than https 🤦‍♂️

UaMV

Any idea what might fix this error?

Client error: `PATCH https://[radacted].com/api/users` resulted in a `405 Method Not Allowed` response:
{"errors":[{"status":"405","code":"method_not_allowed","detail":"Flarum\\Http\\Exception\\MethodNotAllowedException: PAT (truncated...)

I'm using the WP plugin with subdomain integration for the Flarum instance. I'm able to login/logout with my admin account. This error popped up when attempting to process a transaction via Easy Digital Downloads, which provides a form that both creates a user account and processes a transaction (via Stripe) in my case. When submitting the form, the user is created properly in WP and the user is created in Flarum – however, the form fails and the transaction does not process while returning the client error noted above.

The user is able to then login to the site (which successfully logs them into the forum). The forum still requests that the user activate their email (though no activation email was sent - they can request a new one). I appreciate any insights as I work to move my sites to your solution – been running an outdated SSO solution for a while.

Let me know if I can provide any other details as we sleuth this. Thanks!

maicol07

UaMV do you use the PHP plugin, right? What method are you using? Do you use any addons?

UaMV

maicol07 I was hitting that same api/users endpoint earlier when trying to integrate via WP. I never get around to investigating further or solving it.

UaMV Any idea what might fix this error?

Client error: `PATCH https://[radacted].com/api/users` resulted in a `405 Method Not Allowed` response:
{"errors":[{"status":"405","code":"method_not_allowed","detail":"Flarum\\Http\\Exception\\MethodNotAllowedException: PAT (truncated...)

I'm using the WP plugin with subdomain integration for the Flarum instance.
…

That earlier report shows some of the requests leading up to that, I think. Maybe helpful as you hunt.

UaMV

maicol07 I’m using the WP plugin available in the WP directory. None of the add-ons at the moment.

UaMV

This is the entry from the Nginx access log on the forum side of things. At some point, when I have the time, I'm going to try and run another test and see about getting any more detailed request/response information.

[17/Jan/2021:16:46:47 +0000] "PATCH /api/users HTTP/1.1" 405 5391 "-" "Maicol07 Flarum Api Client" "-"

UaMV

Here are a few more of the entries leading up to the PATCH request that fails.

[21/Jan/2021:03:03:06 +0000] "PATCH /api/users HTTP/1.0" 405 5378 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:06 +0000] "GET /api/users/twhl HTTP/1.0" 404 7298 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:06 +0000] "POST /api/users HTTP/1.0" 422 442 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:06 +0000] "GET /api/users/twhl HTTP/1.0" 404 7298 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:06 +0000] "POST /api/token HTTP/1.0" 401 6728 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:06 +0000] "GET /api/users/twhl HTTP/1.0" 404 7298 "-" "Maicol07 Flarum Api Client"
[21/Jan/2021:03:03:02 +0000] "GET /api/users/uamv HTTP/1.0" 404 7298 "-" "Maicol07 Flarum Api Client"

Note the 404 401 422. Even so, as mentioned – the user, in this case, twhl, is being created and can log in after the payment failure.

maicol07

UaMV what Flarum version do you use? I remember there was an old flarum version which had this issue. Try also to check your server/ISP firewall (it may blocks requests)

maicol07

richstandbrook _check your server/ISP firewall as it may block PATCH requests to Flarum.~
richstandbrook UaMV Maybe I've found an issue with the API client: since beta 15 usernames can't be fetched with URLs like /user/{username}. I'll look at it in the next days. Stay tuned for updates!

UaMV

maicol07 Running beta-15. I'll put a ticket in with RunCloud. I have both house on same server under the same user. They've decent support, so may be able to point me to something.

richstandbrook

I'm having the same kind of trouble. I can sign up and login a user, but I get never get the user ID returned and a 405 when trying to update a user.

richstandbrook

richstandbrook I'm developing on my local machine, domains mapped to the localhost, no firewalls. Should the login method return the ID of a new user? How can I get the ID of a newly registered user?

UaMV

maicol07 thanks. I appreciate you checking in this. Does the separate API client need to be installed alongside SSO – I was thinking you might have it wrapped in, yes?

Scumi

maicol07
For reference:
https://discuss.flarum.org/d/24880-flarum-api-client-php/19

maicol07

UaMV the API client should be automatically installed when you install the PHP plugin. If you are using WordPress you need manually to run this command to update the Composer dependencies in the plugin directory or wait the next update (I don't know when it will be released):

composer update --no-dev --prefer-dist

The same command can be used with the PHP plugin

Safinn

Hello. I wondering if this extension works with any Auth system or is is specifically for Wordpress? Is it a case of redirecting back to the flarum for it to work?

maicol07

Safinn no, this extension is made by 2 parts, that works toghether:

Flarum extension: the one that actives signed up users and manages JWT auth (this one is a premium addon, see below). You can install it with composer require flarum-ext-sso on your Flarum
A client plugin: for the moment there are only two plugins: PHP and WordPress. The first one is a generic PHP plugin, means you can use it with any app/framework written in PHP (you can also use this on WP if you don't want to use the official one); the latter is the PHP plugin implementation for WP. This means it isn't specifically for WP
- The latest components is the addons. These are additional features, either free or paid, for plugins, such as the Groups or the JWT addon.

You can find all the details in the docs (link in the first post).
Ask me any question if you have! 😉

Safinn

maicol07 Thanks for the information. I didn't realise it was in 2 parts. So I have the extension installed (does premium mean its paid?) on my flarum instance. My auth system is in Node.js. That means I would need to have a JS client plugin right?

maicol07

Safinn So I have the extension installed (does premium mean its paid?) on my flarum instance.

where do you see premium?

Safinn My auth system is in Node.js. That means I would need to have a JS client plugin right?

Yes. If you want to make it open source and follow how the PHP plugin is written, I can add your plugin to the docs. If you're interested write to me on Telegram (link to my profile in my website: https://maicol07.it) or Discord (find me on the Flarum discord)

« Previous Page Next Page »