PHP and WordPress Single Sign On (SSO) with optional JWT Addon

ctml

Is it unexpected that flarum still sends users activation emails while using this plugin? I'm seeing emails sent with subject "Activate your account" even though the is_email_confirmed column for the new users are set to 1. I'm assuming this should not be occurring but I cannot figure out why.

Subject: Activate your account

<p>Someone (hopefully you!) has signed up to <community> with this email address.</p>
<p>If this was you, simply click the following link and your account will be activated: ...

Edit: Submitted feature request
https://tracker.maicol07.it/issue/FSSOE-26/Disable-Account-Activation-Emails

ctml

FYI maybe an opportunity to leverage this extensions solution to the problem which is supposed to prevent the activation email from sending. I am going to try and see if it will work in combination with this SSO plugin as a workaround.

https://discuss.flarum.org/d/6485-email-verification-switch/58
isaced/flarum-ext-email-verification-switch6

Edit: Combining these 2 extensions seem to work

rayusoes

maicol07
Thank you for your reply.
I am on a local server, and I have two subdomains in different folders.

maicol07

rayusoes are you using the .localhost domain or a "standard" domain?
If you are using .localhost you need to manually copy the flarum_remember cookie from the root domain to the flarum one since the browser doesn't see it as a third-level subdomain

rayusoes

Thank you very much, @maicol07. I was able to solve the cookie problem. It turns out I was using different domains.

sptcguy

I'm trying to access the docs here: https://docs.maicol07.it/en/flarum-sso/ext
But I am getting timeouts whenever I try to access a resource under that subdomain.

maicol07

sptcguy hi, it should be solved now. Today the server got a major issue which affected all my sites performances

sptcguy

maicol07 Been there before myself - Thanks!

rayusoes

Hello,

I have Flarum embedded inside an iframe on a website within the same domain. The login using Maicol07 SSO is working perfectly.

However, I also have a web app where the main website is within an iframe, and the forum is also inside an iframe. I suspect that the flarum_remember cookie is not being created due to the samesite=Lax parameter. Instead, the flarum_session cookie is created with the parameter samesite=None.

I have already edited the config.php file and set samesite='None'.

Thank you.

rayusoes

I forgot to mention that this is a Cordova app.

bearwzee

Hello,

I was testing the flarum inside my local WordPress project, and this extension was almost working perfectly! However, my only concern is that I think it has a conflict with the current WordPress version. When I try to change my user password using WP-Admin dashboard, it returns a fatal error. Can someone please help me with this?

Thank you.

maicol07

bearwzee Hi, can you please post the full error message? Only "Fatal error" isn't enough, unfortunately

bearwzee

maicol07 Hi, thank you so much for replying! I really appreciate it. Here's the full error message that I got:

Fatal error: Uncaught GuzzleHttp\Exception\ClientException: Client error:PATCH http://wordpress.loc/forum/api/users/1resulted in a401 Unauthorizedresponse: {"errors":[{"status":"401","code":"not_authenticated"}]} in C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\guzzle\src\Exception\RequestException.php:113 Stack trace: #0 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\guzzle\src\Middleware.php(69): GuzzleHttp\Exception\RequestException::create(Object(GuzzleHttp\Psr7\Request), Object(GuzzleHttp\Psr7\Response), NULL, Array, NULL) #1 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(204): GuzzleHttp\Middleware::GuzzleHttp\{closure}(Object(GuzzleHttp\Psr7\Response)) #2 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(153): GuzzleHttp\Promise\Promise::callHandler(1, Object(GuzzleHttp\Psr7\Response), NULL) #3 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\TaskQueue.php(48): GuzzleHttp\Promise\Promise::GuzzleHttp\Promise\{closure}() #4 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(248): GuzzleHttp\Promise\TaskQueue->run(true) #5 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(224): GuzzleHttp\Promise\Promise->invokeWaitFn() #6 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(269): GuzzleHttp\Promise\Promise->waitIfPending() #7 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(226): GuzzleHttp\Promise\Promise->invokeWaitList() #8 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\promises\src\Promise.php(62): GuzzleHttp\Promise\Promise->waitIfPending() #9 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\guzzle\src\Client.php(187): GuzzleHttp\Promise\Promise->wait() #10 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\guzzle\src\ClientTrait.php(112): GuzzleHttp\Client->request('PATCH', 'users/1', Array) #11 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\maicol07\flarum-api-client\src\Client.php(68): GuzzleHttp\Client->patch('users/1', Array) #12 [internal function]: Maicol07\Flarum\Api\Client->request() #13 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\maicol07\flarum-api-client\src\Fluent.php(353): call_user_func_array(Array, Array) #14 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\maicol07\flarum-sso-plugin\src\User.php(69): Maicol07\Flarum\Api\Fluent->__call('request', Array) #15 C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\sso-flarum.php(266): Maicol07\SSO\User->update() #16 C:\xampp\htdocs\wordpress\wp-includes\class-wp-hook.php(326): flarum_sso_update_details(1, Object(WP_User)) #17 C:\xampp\htdocs\wordpress\wp-includes\class-wp-hook.php(348): WP_Hook->apply_filters('', Array) #18 C:\xampp\htdocs\wordpress\wp-includes\plugin.php(517): WP_Hook->do_action(Array) #19 C:\xampp\htdocs\wordpress\wp-includes\user.php(2471): do_action('profile_update', 1, Object(WP_User), Array) #20 C:\xampp\htdocs\wordpress\wp-includes\user.php(2594): wp_insert_user(Array) #21 C:\xampp\htdocs\wordpress\wp-admin\includes\user.php(233): wp_update_user(Array) #22 C:\xampp\htdocs\wordpress\wp-admin\user-edit.php(170): edit_user(1) #23 C:\xampp\htdocs\wordpress\wp-admin\profile.php(18): require_once('C:\\xampp\\htdocs...') #24 {main} thrown in C:\xampp\htdocs\wordpress\wp-content\plugins\sso-flarum\vendor\guzzlehttp\guzzle\src\Exception\RequestException.php on line 113

bearwzee

maicol07 Hi, I posted the full error earlier (14 hours ago) but it's still awaiting for approval.

maicol07

bearwzee have you set the Flarum API token in settings? It's not an incompatibility with WP-Admin

maicol07

PHP plugin 3.3

Added dirty attributes and relationships handling before sending update requests (fixes the 401 unauthorized issue in some cases)

WP plugin 2.2.1

PHP 8.0+ required
Removed email update when sending profile updates to Flarum (this caused the 401 unauthorized issue since Flarum requires the password for updating email via API)
Upgraded to PHP plugin 3.3
Upgraded dependencies

Thanks to those who reported the 401 issue: bearwzee and others.

bearwzee

maicol07 Yes, I did. The SSO Authentication was successful, it's just that when I try to change user password on the WP Admin, I get that fatal error response.

bearwzee

I also would like to clarify that I don't have any other plugins installed aside from SSO for Flarum on my Wordpress Local. If I try to deactivate the plugin, I can change user password without any conflict.

maicol07

@bearwzee I've reproduced the issue and I'm working on a fix

Xkyer

Hello maicol, i setup well this extension very well. But i forgot where to looking the key, and member just a find via inspect. Can you provide me litle bit info about how to my wp visitors to signup only via wordpress and to be loged into flarum to, did i need to instal flarum on the same db like wp or ?

@hrvoje_hr druze zdravo, can i ask u somewhere on hr launguage about sso? Its easy for me, i am lost with days…

maicol07

Xkyer No, you don't need to have WP and Flarum installed on the same DB. Check the docs for how to retrieve the API key from Flarum: https://docs.maicol07.it/en/flarum-sso/plugins/wordpress#pre-installation

hrvoje_hr

sure @Xkyer

« Previous Page Next Page »