PHP and WordPress Single Sign On (SSO) with optional JWT Addon

maicol07

hrvoje_hr I've added the PRO features to the docs (only 1 integration at the moment). Check them in the PRO features page

010101

I feel defeated. For the third time I took a shot at getting this to work with a WordPress site. It doesn't. This time though, I think it could be the WordPress theme's fault. It doesn't use the standard wp-login.php page. Maybe I'll take a look at the code and see if any type of manual tweak could work.

I'm just trying to get the basic set up to work. WordPress is at mysite.com and Flarum is at discuss.mysite.com. Followed the instructions very carefully. Sigh. Oh well. 🙁

maicol07

010101 well, the plugin uses the authentication filter from WordPress so if your themes uses a custom authentication it will not work. You should edit your theme to use that filter (I think you can do it via the do_filter function, I recommend you to create a child theme)

010101

maicol07 It's just not worth it. Now I can't even get logged back into the forum with this extension removed. Maybe a cookie/cache clear will do it.

0ctave

Hey guys, I'm getting some issues trying to this addon on my symfony website, everything seem to be setup but when I try to login a dummy user I keep getting a timeout. I tried to search for the problem so I tried to request the token of an already created user on my Flarum with a POST request on reqbin

{"json" : [{
  "identification" : "myusername",
  "password" : "mypassword",
  "lifetime" : "3600"}]}

But the response is always {"errors":[{"status":"401","code":"not_authenticated"}]}

Does someone have an idea on how to fix that ?

I also have an other problem when I try to login, It pings on 443 on my Flarum, but I only opened the 80 (or 8888) for security reasons, can't I make the Rest API fetch the POST reponse on another port ? (It's behind a reverse proxy so it's a bit tricky I can't really call a specific port but only on a subdomaine name)

Thx 😃

maicol07

0ctave are you sending the POST request for the token to the /api/token endpoint?
If you don't have SSL on your Flarum you may want to enable the insecure option: DOCS (check here instead for the PHP api docs)

0ctave

Yup i'm sending it in the content of the post request on "myforum.com/api/token",

I have SSL on my flarum but it's on my reverse proxy, so it's a bit different

maicol07

0ctave maybe the proxy is the problem... try to enable the insecure mode to see if it works with that

0ctave

I tired yeah but it doesn't seem to do anything 😅
And even if it came from that my post request shouldn't return that ?
{"errors":[{"status":"401","code":"not_authenticated"}]}
Could it be a permission problem ?

maicol07

0ctave Have you added a master token?

0ctave

You mean in the flarum_api_keys ? I added a random key that I created and linked it to my admin account on the forum
But during my test, by sending POST requests to /api/token I didn't sent it in the json array should I ?

maicol07

0ctave Yes. The call to the token endpoint must include a JSON body like the one you have written before

0ctave

maicol07 Yep but why it doesn't answer me with the user token then ? If the request require no auth it shouldn't answer me that no ?

maicol07

0ctave The request to the token endpoint requires the authentication with the master token and the identification and password in the JSON body

0ctave

maicol07 So how would the request would look like on this basis ?

{"json" : [{
  "identification" : "myusername",
  "password" : "mypassword",
  "lifetime" : "3600"}]}

maicol07

0ctave first, sorry for the late reply, but I've missed your message 😅
So, I think your JSON structure is wrong. It should be:

{
  "identification" : "myusername",
  "password" : "mypassword",
  "lifetime" : "3600"
}

You are enclosing the JSON body into the json key

Gerbz

Glad to see this plugin being maintained - thanks @maicol07!

Is there any migration issues? I see the previous wordpress plugin logged in with:
$flarum->login( $user->user_login, $user->user_email );

And the new one logs in with:
$flarum->login( $username, $user->user_email, $password, $groups );

Currently I'm running your new Flarum plugin v1.6 but the OLD wordpress plugin. I use WooCommerce so we had to make some adjustments to get login/registration working. Primarily these 2 filters:
add_filter('woocommerce_login_redirect', 'woo_login_redirect', 10, 2);
add_filter( 'woocommerce_registration_redirect', 'woo_registration_redirect' );

maicol07

Gerbz you should check what arguments does the filter pass to the login function. Since WP passes to the filter function those arguments (see them in flarum_sso_login) you should check whether the WooCommerce sends the same parameters. Otherwise, you need to get the values yourself with the parameters you have

stmorales23

I’m confused as to how to implement this. I’ve started by download the ‘flarum-ext-sso’ and configuring the config.php and forum.php. Upon doing this, I was able to make the signup() function public to test on it’s own and it did work. Upon using the login() function, no account is created in Flarum when using this function when a user is registered on my main website. Am I missing a component? Is there a plugin I should have downloaded on Flarum as well?

maicol07

stmorales23 What version of the plugin are you using? The PHP plugin can be installed with composer, which is the best and simpler way to get it

« Previous Page Next Page »