PHP and WordPress Single Sign On (SSO) with optional JWT Addon

maicol07

Sanyu 🤔 maybe I've misspelled the WP setting id. I'll check it

Sanyu

maicol07

Oh I just saw that there was an option added in the WP plugin Update user avatar. I guess I should check that?

Edit: the 2nd problem is fixed, I forgot to enable the Update user avatar setting 😅

luceos

maicol07 we should bump to php 8 and get it over with 🙈

maicol07

luceos that's great since I love the new features of PHP 8. I guess it will be bumped with 1.1, right?

luceos

maicol07 we follow our dependencies. We try to keep the minimum as low as possible. Our next bump probably will be caused by Laravel 9. Although personally I have already been publishing with a minimum PHP version of 7.4: https://discuss.flarum.org/d/27620-mercury-the-extiverse-extension-to-understand-extension-updates

rob006

maicol07 That would be crazy. PHP 8 has only 16% of market share according to Packagist: https://packagist.org/php-statistics

maicol07

luceos yeah, I've seen it. I agree bumping PHP if needed. Laravel upgrade is a great chance to upgrade PHP with it if necessary

maicol07

rob006 I think the main reason for this is that a lot of people uses shared hosting. Most shared hosting didn't have PHP 8 available to customers

luceos

maicol07 I think nowadays many hosting companies already have multi php version support and PHP would definitely be an option. It's most likely that websites got installed under a specific version and people then stick to that unless something goes wrong.
Understand that the packagist metrics are based on composer binary use, it does not scan websites.

Digitalam

Hi! 🙂 Great plugin @maicol07!

I'm using a php project (Laravel) with Flarum, and I think I've pretty much did what your example/index.php told me to. When I var_dump($flarum_user), all the attributes are shown, looks perfect so far.

Everything works, until the $flarum_user->login()... I get logged into my project, but when $flarum->redirect() redirects me to my Flarum, it doesn't log in.. any idea why? 🙏

maicol07

Digitalam what extension, flarum and plugin versions do you have installed? What is your config array (in particular root domain and flarum url)?

Digitalam

maicol07 Thanks for the speedy reply!

I've installed

Flarum 1.0.0
Flarum core 1.0.3
maicol07-sso  v1.10.1 (in Flarum)
"maicol07/flarum-sso-plugin": "^3.0" (in composer.lock)

FLARUM_HOST=http://forum.flarumbreeze.test
ROOT_DOMAIN=http://flarumbreeze.test

And I'm using WAMP (Apache)

And I realised that when I dump and die the whole app before redirecting, the cookie login_web_random_str stays with me. But after returning to another endpoint, the cookie disappears...

maicol07

Digitalam I don't know what cookie is that one, it isn't from my extensio. Config is OK. Check if you have disabled the verify ssl option since you are using plain http

Digitalam

Oh my! Works like a charm! Thank you so much! 😀

maicol07

Digitalam you're welcome!

eeepurushoth

Hello @maicol07 thank you for the great SSO plugin for wordpress & flarum.
i would like to know how can i connect multiple flarum forums in subdomains to be connected to a single WP website.

single SSO login in wordpress and connect to multiple flarum forums. is this is possible.
If yes how can i achieve that by any means,

thank you in advance.

maicol07

eeepurushoth actually the WP plugin doesn't support multiple flarum instances. However, you can try to copy the WP plugin to another folder and see if it works with 2 flarums or more. This behaviour isn't currently supported by the clients so don't expect anything

lubos-h

maicol07

Good day Maicol, I hope you are doing good.

Please would you have chance to check if the SSO extension works ok with the "start a discussion" button where if login/signup links are disabled, flarum should not trigger the login/signup page?

Thank you.

maicol07

lubos-h hi, I've forgotten to check it 😅. Anyway, I've just checked it now and I confirm that clicking the "New discussion" button when not logged in, redirects to the SSO login page.

wirtzdan This extension was born principally for a PHP auth systems. WordPress is a further implementation of the PHP plugin. However, I think you are able to use it with your JWT system. You need to make sure you send your JWT to {flarum_url}/sso/jwt (replace {flarum_sso} with your Flarum URL). Let me know if it works

wirtzdan

Thanks for great extension @maicol07

I see most posts are related to WordPress, but would also work with another authentication provider?

I'm using Outseta and I'm able to generate a JWT Token:

And I also have the issuer domain. I've added both into the extension settings.

But I don't understand what else I need to do and it's not working right now.

How does the extension/Flarum know, when someone has logged into my website?

I'm also hosting the forum right now on FreeFlarum.

lubos-h

maicol07 hi, I know I am being annoying 😄, I am running on flarum 1.0.4,

when I activate "remove login button" in SSO, flarum login button (top right) disappears & "New discussion" opens login pop-up, aka my problem 😄
when I de-activate "remove login button" in SSO, flarum login buttion (top right) is visible & "New discussion" redirects to specified url (does not open flarum login pop-up).

« Previous Page Next Page »