PHP and WordPress Single Sign On (SSO) with optional JWT Addon

Hari

yes going through documentation , thanks its very detailed 🙂

https://docs.maicol07.it/en/flarum-sso/plugins/wordpress

Sanyu

Hi!

I noticed that when I enter wrong info in the login form on my website, that the error block won't show up. This only happens when the SSO Flarum is enabled.

Normally it looks like this

But with the SSO plugin enabled, the page loads without the error block.

Do you know what could cause this problem?

maicol07

Sanyu there are two cases:

Your login form gets processed and triggers the error after the SSO function, which has a priority of 35 in the WP filters system.
Your login form gets processed and triggers the error before the SSO function, which returns a blank error. I can easily fix this. I'll include that in the next update to avoid similar issues.

Sanyu

maicol07 Okay thanks for letting me know!

Hari

Hey one quick question, if we integrate SSO is there any option to disable entire flarum registration? I don't want flarum login fields

When user hits login or signup button he should goto wordpress login URL after authentication he will be redirected back to flarum

Instead of asking I can just try to install and test myself

But I'm stuck in beta 13 , I don't know how to install. I don't want to break my site

how to install for beta 13? Could let me know command

maicol07

Hari yes, the main purpose of this extension is to use your own auth system. So Flarum login and signup is disabled when SSO is enabled and related buttons redirects to the URL you set in settings.
Currently, I support only the latest major version of the extension (and plugins). So you have two possibilities:

Upgrade to beta16 and use the latest SSO version
Use an older version, compatible with beta13, knowing that it can contain bugs and issues solved in newer releases. You won't get support here with an older version.

My personal advice: always try to use updated software (not only Flarum) 🙂

Hari

maicol07 thanks for the quick reply, i was going back and forth for beta 16, since v1.0 will be out shortly i want to directly jump to v1.0 . but all other extensions need to be supported to v1.0 .. need to wait for a week or two for that.

and how about profile pics. can we set profile pics like if some one has google or facebook profile pic in wordpress it can copy it . if has no profile pics can we set flarum to load default letters ?

if that's not possible we may need to install "Leira Letter Avatar" at WordPress ? so we can handle everything from wordpress
https://wordpress.org/plugins/leira-letter-avatar/

little confused sorry for brining such basic questions. i do use xamp but due to this php7.4 i could not upgrade Xamp in local and its causing port conflicts to test everything

maicol07

Hari yeah, 1.0 is really near...
It may be possible this time extensions will be updated quickier since there is already the breaking changes documentation. If you need it now, I recommend you to upgrade to beta16 and then wait to upgrade to 1.0 only when all the extensions you need have been updated to 1.0

Profile avatars are synced between WP and Flarum (WP avatars are used). This behaviour will be toggleable (I don't know if this term is right.... However, it means switch off or on) so you can choose what system should manage avatars.

I don't understand the issue with xampp and php 7.4... You should be able to use a custom domain, add it to your hosts file and check it in a browser

Hari

maicol07 finally i have managed to install xampp and flarum in local

i've installed sso extension and also installed worpress sso enable plugin from wp store

installed sso api extension too

In order to start working with the client you might need a Flarum master key:

Generate a random token (for security purposes it is better if this is long 40 characters; you can use this tool to make one)

DONE *

Manually add it to the api_keys table using phpmyadmin/adminer or another solution.

how ? *

when i hit login at flarum from private window its taking to wordpress login page after login its taking wp-admin

not taking back to flarum page

am i missing something ?

maicol07

Hari I don't think it works without an API key. From PHPMyAdmin go to the insert tab and add an API key there.

Also, you should update the extension to the latest version from GitHub (go to releases and then download the zip in the assets section) since the one in the WP repo doesn't work with beta16. There is an issue with WP Repo I'm trying to fix, but for the moment a manual update is required

Hari

maicol07

INSERT INTOapi_keys(key,id,allowed_ips,scopes,user_id,created_at,last_activity_at) VALUES ('oqwqwzdbnydndcyabjxnxbalrxpvaofn', NULL, NULL, NULL, NULL, '2021-05-14 18:51:45.000000', '2021-05-14 18:51:45.000000');

right ?

i have downloaded the WordPress plugin from github and replaced files and activated plugin again

line 74 // Composer Autoloader.require_once plugin_dir_path( FILE ) . 'vendor/autoload.php';`

R:\xampp\htdocs\test\wp-content\plugins\sso-flarum

R:\xampp\htdocs\flarum\vendor

is this correct path ?

`require_once plugin_dir_path( FILE ) . 'flarum/vendor/autoload.php';``

maicol07

Hari
Also add the user_id to the api key (should be the id of your admin user)

does the vendor folder exists in the plugin folder?
Try to upload the zip from WP dashboard (I don't know if you know it but from WP 5.6 you can upload a newer plugin version and WP will automatically update the plugin if it is already installed)

Hari

maicol07 I've deleted and replaced SSO in wp plugin folder . I will try and keep you posted

Hari

maicol07 does the vendor folder exists in the plugin folder?

i have deleted that folder reinstalled from wordpress store - downloaded repo from github and updated plugin from wordpress plugin area - it got updated and after the update vendor folder got deleted.

for next updated could you plan to install from wp plugin store and at flarum without touching db manually

tharuka

Hi @maicol07 ,
I made my app work with your extension but there is a small problem. I used Codeigniter 4 as the framework and the main website is at localhost/xxxx and my forum is at localhost/xxxx/forum. When I set root_domain to localhost plugin works but when I try to go to the forum it automatically redirects me to localhost sometimes. When I set root_domain to localhost/xxxx/forum plugin is not working.

maicol07

tharuka mmm... It should work...
How do you go to the forum?

tharuka

maicol07 When I first logged in it forwards me to the localhost but after that, it works fine with localhost/xxxx/forum URL. The first time is the problem.
I used the existing example and same problem
You can try this here https://mannapperuma.com/sso/

maicol07

Hari for the WP repo yes, I'm working on it. I'll see if I can generate an API key from the extension, but I don't promise anything about that. For the moment, run a composer install --no-dev in plugin folder to solve the issue with the WP plugin

tharuka Try to deactivate all the extensions except SSO on Flarum and see if the issue persists

tharuka

maicol07 I installed a fresh copy of flarum only with the plugin and used your examples provided but same thing happens

maicol07

tharuka that's strange... if you see the URL of the button is correct, the redirect starts when Flarum is loading. Can you try to dump $request->getUri() in LoginMiddleware.php (extension)?

tharuka

maicol07
C:\wamp64\www\sso\forum\vendor\maicol07\flarum-ext-sso\src\Middleware\LoginMiddleware.php:25:
object(Laminas\Diactoros\Uri)[752]
protected 'allowedSchemes' =>
array (size=2)
'http' => int 80
'https' => int 443
private 'scheme' => string 'http' (length=4)
private 'userInfo' => string '' (length=0)
private 'host' => string 'localhost' (length=9)
private 'port' => null
private 'path' => string '/' (length=1)
private 'query' => string '' (length=0)
private 'fragment' => string '' (length=0)
private 'uriString' => null

This is the data I get from that

« Previous Page Next Page »