PHP and WordPress Single Sign On (SSO) with optional JWT Addon

AdamMiltonBarker

ctml hi yes many times. Still no change

AdamMiltonBarker

ctml I got this sorted was a silly mistake on my side 😀 Is there any more in depth documentation on this, how do I get my login script to interact with the extension, for example I have the login url setup and it redirects to the correct page, but surely there is code that needs to go into the php login code that interacts with the extension ? Thanks for the input complete noob regarding Flarum and extensions. I see mention of a PHP plugin for the registration/login but I cannot find it.

OK found the plugin https://github.com/maicol07/flarum-sso-php-plugin No mention of registration, any docs on that ? I understand that use is created on login but that is not what is required at the moment, need to be able to register a new user before login.

askvortsov

AdamMiltonBarker This is unfortunately another item where our documentation is a bit lacking. In the meantime, for example code, I'd take a look at https://github.com/FriendsOfFlarum/oauth, which supports third party registration.

AdamMiltonBarker

Some things that may be helpful to others in the future to get it working I had to install:

composer require vlucas/phpdotenv
composer require phpoption/phpoption

Works well 😀 just to work out how to register and all sorted, thanks for the plugin.

Spoke to soon, it suddenly started failing:

Uncaught Dotenv\Exception\InvalidPathException: Unable to read any of the environment file(s)

AdamMiltonBarker

askvortsov hi I got it working but now it fails after no changes to code, I was successfully logged in, and checking the forum the correct account was logged in, now it fails with : Uncaught Dotenv\Exception\InvalidPathException: Unable to read any of the environment file(s) with the code:

$env = Dotenv::createImmutable(DIR);
$env->load();

AdamMiltonBarker

More errors, this doesn't make sense, I had logged into multiple accounts using the extension and plugin correctly and it just stopped lol No configuration changes, no code changes.

[21-Nov-2021 20:26:03 Europe/Madrid] PHP Fatal error: Uncaught GuzzleHttp\Psr7\Exception\MalformedUriException: Unable to parse URI: https:///api/ in /home/leukaemiamedtech/public_html/community/forum/vendor/guzzlehttp/psr7/src/Uri.php:85
Stack trace:
#0 /home/leukaemiamedtech/public_html/community/forum/vendor/guzzlehttp/psr7/src/Utils.php(407): GuzzleHttp\Psr7\Uri->construct('https:///api/')
#1 /home/leukaemiamedtech/public_html/community/forum/vendor/guzzlehttp/guzzle/src/Client.php(67): GuzzleHttp\Psr7\Utils::uriFor('https:///api/')
#2 /home/leukaemiamedtech/public_html/community/forum/vendor/maicol07/flarum-api-client/src/Client.php(38): GuzzleHttp\Client->construct(Array)
#3 /home/leukaemiamedtech/public_html/community/forum/vendor/maicol07/flarum-sso-plugin/src/Flarum.php(75): Maicol07\Flarum\Api\Client->construct('https://', Array, Array)
#4 /home/leukaemiamedtech/public_html/community/classes/auth.php(86): Maicol07\SSO\Flarum->construct(Array)
#5 /home/leukaemiamedtech/public_html/community/classes/auth.php(123): CommunityAuth->login(Object(Reca in /home/leukaemiamedtech/public_html/community/forum/vendor/guzzlehttp/psr7/src/Uri.php on line 85

askvortsov

AdamMiltonBarker By any chance, do you have your code on Github?

From the most recent error you shared, it looks like it's trying to use /api as an absolute url (https:///url) instead of a relative one (https://your.site/api). Looks like the issue might be in your CommunityAuth class?

AdamMiltonBarker

askvortsov the configuration in flarum.php was set correctly however it was not being used, I had to repeat that configuration in the .env file to make it work. Strange thing is it worked before this.

AdamMiltonBarker

I noticed that if you are elsewhere other than the forum but logged in, it will time out before the session has expired. How long are the cookies set for ?

Also is updating the password possible using password attribute? Couldn't find anything in the docs.

maicol07

AdamMiltonBarker sorry, I didn't received an email regarding your posts 😅 (@luceos is the same issue as the last time? I receive new discussions emails, though...)
The cookies are set as Flarum standard ones: https://github.com/maicol07/flarum-sso-php-plugin/blob/master/src/Traits/Cookies.php
(1 hour for standard login, 5 years for remember me)

AdamMiltonBarker Also is updating the password possible using password attribute?

Yes, you should be able to do it (PHPDocs are there for read-only attributes)

adam42

I'm trying to run flarum login via SSO from my wordpress main website.

I've got Wordpress running the main domain authentication at

https://ecocounts.community

and flarum sits at

https://forum.ecocounts.community

and I followed the instructions to configure it with the WP URLs.

I assumed I'd need an SSO plugin on Wordpress so I installed the WP oAuth Server but haven't set any configuration.

Now I've reached a dead end. Flarum redirects the login to Wordpress, but after logging in, it tries to redirect to:

https://ecocounts.community/forum

which doesn't exist, so obviously the configuration setting for the Login Url was wrong. Where do I go from here? The docs seem to tell me nothing and I didn't get any ideas from reading most of the above, but I get the impression that lots of people are succeeding here where I haven't. Any help would be well appreciated.

maicol07

adam42 no, you need the SSO plugin from this extension. Read more here: https://docs.maicol07.it/en/flarum-sso/plugins/wordpress (in the blue sidebar there is a section with the list of available plugins).
You don't need an external plugin from WP (you have to use the one I've linked above)

adam42

Hey, thanks for getting back so quick. When I install the api_key, what user id do I use? The Wordpress admin email address or username, or the flarum user id?

maicol07

adam42 the user id of your admin account on Flarum

adam42

This should work, right?

INSERT INTO api_keys (key, user_id) VALUES ('7UNjg2qjdF6SUbxM2wzDgU2CUyjlH5yIGdnpoio0',1);

Gives me a syntax error.

maicol07

adam42 check your column names in your DB (you can also use a GUI like PHPMyAdmin). Also change the api key you chose, since anyone can login and manage your Flarum if you use the one you have posted

adam42

Must have been the way MariaDB was set up on my host - I had to backtick the col names, then it worked.

I'll change the API key! Good point 🙁

And all the login attempts triggered my fail2ban blocker .... doh!

So to go back to the original question, what should the redirect_to parameter be when my forum is at forum.mydomain.com and not mydomain.com/forum?

It's obviously not "https://ecocounts.community/wp-login.php?redirect_to=https://forum.ecocounts.community" 😅

maicol07

adam42 don't worry! The forum string is used by the plugin to successfully redirect the user to your Flarum URL. So, in your case, after the user logins to https://ecocounts.community/wp-login.php?redirect_to=forum it will be redirected to https://forum.ecocounts.community.

DursunCan

Can I transfer my WordPress site's accounts to Flarum? After transferring the accounts of my Wordpress site, I will close the Wordpress account login.

maicol07

DursunCan that's not the purpose of this extension. The extension will only login the users on Flarum when they login on WP

« Previous Page Next Page »