PHP and WordPress Single Sign On (SSO) with optional JWT Addon

maicol07

adam42 I think you'd reduce the head scratching for users like me if you add the WP plugin as a requirement for the Flarum SSO extension in the documentation.

Yeah, you're right. I'll add it!

adam42 However my existing user on flarum (with admin rights and user_id = 1) can't login

The Flarum admin user in WP must have the same password it uses on Flarum. Otherwise it can't successfully login.

adam42 Do you want to see the error msg in full?

What is the message?

adam42

That worked, thanks. If a user creates a WP account, I think they will need to enter their flarum password in the pw field, right? I am thinking that the WP plugin won't update their flarum password when they create their WP account - that must be the cause of the WP error I saw, I think. Here's the full error:

WordPress version 5.8.2
Current theme: Twenty Twenty-One (version 1.4)
Current plugin: SSO for Flarum (version 2.2)
PHP version 7.4.25



Error Details
=============
An error of type E_ERROR was caused in line 113 of the file /home/carbonc/sites/wordpress/wp-content/plugins/sso-flarum/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php. Error message: Uncaught GuzzleHttp\Exception\ClientException: Client error: `PATCH https://forum.ecocounts.community/api/users/15` resulted in a `422 Unprocessable Entity` response:
{"errors":[{"status":"422","code":"validation_error","detail":"The email has already been taken.","source":{"pointer":"\ (truncated...)
 in /home/carbonc/sites/wordpress/wp-content/plugins/sso-flarum/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php:113
Stack trace:
#0 /home/carbonc/sites/wordpress/wp-content/plugins/sso-flarum/vendor/guzzlehttp/guzzle/src/Middleware.php(69): GuzzleHttp\Exception\RequestException::create(Object(GuzzleHttp\Psr7\Request), Object(GuzzleHttp\Psr7\Response), NULL, Array, NULL)
#1 /home/carbonc/sites/wordpress/wp-content/plugins/sso-flarum/vendor/guzzlehttp/promises/src/Promise.php(204): GuzzleHttp\Middleware::GuzzleHttp\{closure}(Object(GuzzleHttp\Psr7\Response))
#2 /home/carbonc/sites/wordpress/wp-content/plugins/sso-flarum/vendor/guzzlehttp/promises/src/Promise.php(153): GuzzleHttp\Promise\Promise::callHa

maicol07

adam42 an user that logs into WP that already has a Flarum account must use the Flarum account password in the WP one. Instead, newest users that don't have a Flarum account yet, can enter whatever password they like. It will be copied over to Flarum by the plugin when the user first logins/signs up.

adam42

OK, clear.

Now I have another, unrelated question.

I also have a MediaWiki instance - can I hook up SSO on MediaWiki to WP running the WP plugin for Flarum?

https://www.mediawiki.org/wiki/Extension:OAuth2_Client

maicol07

adam42 no, this extension and its plugins only targets Flarum. If you want to do this, you should check my OpenID Connect extension, and use it with an OpenID Connect server plugin for WordPress (check the docs about that extension, there are a few examples) and this mediawiki extension:

adam42

ROFL

Oh well, at least I had the satisfaction of getting this one working. I'll give the OpenID Connect extension a blast.

Of course, that immediately begs the question of what extra stuff this extension does which your OpenID Connect extension doesn't? Otherwise surely you would mark this one as obsolete.

maicol07

adam42 I won't mark this as obsolete. This extension is the "free, hard way", whether the OIDC extension is the "premium, free way". You can check the differences in this pharagraph of the docs.

adam42

No, I didn't express myself well. I wasn't telling you to mark it as obsolete, I was asking why it wasn't obsolete because I didn't realise the other extension is premium, but you've answered that question now. Unfortunately I am doing this for a charity for free and the aim is to restrict the costs to the hosting provider charges, so I can't introduce any paid-for software.

It's not totally clear to me and I haven't tried it yet, but I assume that I can run the Flarum SSO extension & WP Flarum plugin alongside a WP OAuth Server plugin and they shouldn't interfere. That seems logical at this point, since the two WP plugins will have different endpoints that their clients will call. Have you tried that?

maicol07

adam42 yes, it can work if the endpoints are different. Although it isn't tested

ANWEN

010101 I'm also looking for a solution installed in a subdirectory（我也在找安装在子目录下的解决方案）.

maicol07

ANWEN that post is really old. You should retry and see if it works. Otherwise, you should check the solutions in the post below the one you replied to

010101

maicol07 Yes, old post, but I never got it working. I gave up. Could just be user error though. Solutions like this can be tricky to get working unless you know how to troubleshoot the problem. Unrelated to this extension, but I also can’t get the Twitter or Google sign in parts of the fof oauth extension to work. I could only get the facebook sign in to work. The fact that I got the facebook one to work tells me I’m not doing these things completely wrong. They are just sensitive or do not work in certain specific circumstances.

So, I know I just suddenly brought up a different extension but the point is that any sign in extension, in my opinion, is just sensitive and sometimes hard to get working.

KjayCopper

Hey guys,

I am not gonna lie. I am a massive newbie when it comes to composer and I still don't really understand it. I am surprised I can install flarum and extensions.

My current web app uses no frameworks like laravel or composer.
I would like to link my current web app with Flarum so that it's easier for my members to have just 1 account.

If there any way that this can be done without using composer?
Even if someone can convert it for me so I can implement me (I can pay a little for the inconveience)

Thanks

maicol07

KjayCopper hi,
if you want to install the plugin for your main website without composer you can try via this website, that downloads it for you (however, it requires a subscription to download ipackages): https://php-download.com/package/maicol07/flarum-sso-plugin

You can also try to download the repo zip and also its dependencies, but then you would check all the use statement and edit them with your path, which may not be worth the time. If you still want to try, here's the repo: https://github.com/maicol07/flarum-sso-php-plugin

I recommend you to learn how to use Composer, since it's very easy and simplifies a lot packages management

KjayCopper

Okay so I think I am getting somewhat somewhere.
However I hit a dead end

I do the login on my side and it doesnt return any errors however when I go back to the forum website it doesnt log me in. anyone know why this might be

maicol07

KjayCopper how is your setup? (Domain/subdomain or in a folder)
Can you check your browser cookies?

Note that if you're testing it on localhost you might have a few issues

KjayCopper

maicol07

I do have an access key on the cookies it jsut wont actually log me in on the forum website

maicol07

KjayCopper have you checked the Troubleshooting page on the docs?
https://docs.maicol07.it/en/flarum-sso/plugins/php#troubleshooting

KjayCopper

I have followed what the troubleshooting is, if you have any other way to contact you I will send you the code

maicol07

KjayCopper yes, you can find me on Telegram (@maicol07)

« Previous Page Next Page »