PHP and WordPress Single Sign On (SSO) with optional JWT Addon

maicol07

luceos yeah, I've seen it. I agree bumping PHP if needed. Laravel upgrade is a great chance to upgrade PHP with it if necessary

rob006

maicol07 That would be crazy. PHP 8 has only 16% of market share according to Packagist: https://packagist.org/php-statistics

maicol07

rob006 I think the main reason for this is that a lot of people uses shared hosting. Most shared hosting didn't have PHP 8 available to customers

luceos

maicol07 I think nowadays many hosting companies already have multi php version support and PHP would definitely be an option. It's most likely that websites got installed under a specific version and people then stick to that unless something goes wrong.
Understand that the packagist metrics are based on composer binary use, it does not scan websites.

Digitalam

Hi! 🙂 Great plugin @maicol07!

I'm using a php project (Laravel) with Flarum, and I think I've pretty much did what your example/index.php told me to. When I var_dump($flarum_user), all the attributes are shown, looks perfect so far.

Everything works, until the $flarum_user->login()... I get logged into my project, but when $flarum->redirect() redirects me to my Flarum, it doesn't log in.. any idea why? 🙏

maicol07

Digitalam what extension, flarum and plugin versions do you have installed? What is your config array (in particular root domain and flarum url)?

Digitalam

maicol07 Thanks for the speedy reply!

I've installed

Flarum 1.0.0
Flarum core 1.0.3
maicol07-sso  v1.10.1 (in Flarum)
"maicol07/flarum-sso-plugin": "^3.0" (in composer.lock)

FLARUM_HOST=http://forum.flarumbreeze.test
ROOT_DOMAIN=http://flarumbreeze.test

And I'm using WAMP (Apache)

And I realised that when I dump and die the whole app before redirecting, the cookie login_web_random_str stays with me. But after returning to another endpoint, the cookie disappears...

maicol07

Digitalam I don't know what cookie is that one, it isn't from my extensio. Config is OK. Check if you have disabled the verify ssl option since you are using plain http

Digitalam

Oh my! Works like a charm! Thank you so much! 😀

maicol07

Digitalam you're welcome!

eeepurushoth

Hello @maicol07 thank you for the great SSO plugin for wordpress & flarum.
i would like to know how can i connect multiple flarum forums in subdomains to be connected to a single WP website.

single SSO login in wordpress and connect to multiple flarum forums. is this is possible.
If yes how can i achieve that by any means,

thank you in advance.

maicol07

eeepurushoth actually the WP plugin doesn't support multiple flarum instances. However, you can try to copy the WP plugin to another folder and see if it works with 2 flarums or more. This behaviour isn't currently supported by the clients so don't expect anything

lubos-h

maicol07

Good day Maicol, I hope you are doing good.

Please would you have chance to check if the SSO extension works ok with the "start a discussion" button where if login/signup links are disabled, flarum should not trigger the login/signup page?

Thank you.

maicol07

lubos-h hi, I've forgotten to check it 😅. Anyway, I've just checked it now and I confirm that clicking the "New discussion" button when not logged in, redirects to the SSO login page.

wirtzdan This extension was born principally for a PHP auth systems. WordPress is a further implementation of the PHP plugin. However, I think you are able to use it with your JWT system. You need to make sure you send your JWT to {flarum_url}/sso/jwt (replace {flarum_sso} with your Flarum URL). Let me know if it works

wirtzdan

Thanks for great extension @maicol07

I see most posts are related to WordPress, but would also work with another authentication provider?

I'm using Outseta and I'm able to generate a JWT Token:

And I also have the issuer domain. I've added both into the extension settings.

But I don't understand what else I need to do and it's not working right now.

How does the extension/Flarum know, when someone has logged into my website?

I'm also hosting the forum right now on FreeFlarum.

lubos-h

maicol07 hi, I know I am being annoying 😄, I am running on flarum 1.0.4,

when I activate "remove login button" in SSO, flarum login button (top right) disappears & "New discussion" opens login pop-up, aka my problem 😄
when I de-activate "remove login button" in SSO, flarum login buttion (top right) is visible & "New discussion" redirects to specified url (does not open flarum login pop-up).

wirtzdan

Thanks @maicol07.

I just saw that Outseta is using RS256 as a signing method, but I can pick that one in the SSO extension. Would this be a problem?

To be clear about what needs to be done: Once the user logs into my website (By using Outseta Auth) I have to send the JWT to {flarum_url}/sso/jwt. From there Flarum can also recognise the user and automatically log him in?

maicol07

wirtzdan RSA signatures aren't supported at the moment, only HMAC/SHA ones. You can either check if you can change it or use my OpenID Connect extension (it seems your Auth provider supports it, but maybe you have to contact them to know the URLs of the required endpoints)

maicol07

lubos-h mmm... That's really strange... Have you cleared your cache with php Flarum cache:clear?

maicol07

1.10.2 - Flarum extension

Released on August 09, 2021

✨ Features (dev)

fd9bc60 ✨ Added Typescript config to get Flarum typing definitions
8b70076 code_tools: ✨ Added Prettier instead of ESLint

⚡ Performance Improvements

6fbd7f9 ⚡ Better frontend settings helper

🐛 Bug Fixes

3e24b49 New Discussion button opening the Login modal (thank you lubos-h for the report)
- Also did some major refactor
f9cb9f4 🐛 Wrong app namespace

♻ Code Refactoring

3dce5dc Reformatted build action
edbd507 ♻️ Removed old Webpack config
f17a9a5 ♻️ Removed ESLint comments

👷 CI changes

3233f94 Trigger changelog workflow when JS build has finished
f244d0f Updated build action
b8e32e2 👷 Added Flarum Bot to automatically compile JS
646203c 👷 Added conditional commit messages to changelog action
086bdea 👷 Updated changelog generation

Other changes

4145636 deps: ⬆️ Upgraded Flarum Webpack config
3e99300 meta: Updated extension icon colors for better contrast

lubos-h

maicol07 yes, couple of times

maicol07

lubos-h have you also tried to clear browser cache or hard refresh the page via CTRL + SHIFT + R?

ctml

lubos-h how about with all other extensions disabled?

« Previous Page Next Page »