I am aware of an issue regarding cookies when my extension is used in a cross-origin context. Using the extension in such a context has so far been unsupported (see requirements in documentation), but it was mostly working.

Up until recently, only global login would be unavailable on cross-origin, but connecting and disconnecting from Flarum side would work.

Now with Chrome defaulting cookies to SameSite=Lax, cross-origin iframes can no longer access Flarum session cookies, which means the iframe comments has effectively become read-only and it's impossible to connect or interact with Flarum inside of it.

The upcoming Flarum beta 14 will also mark Flarum cookies explicitely as SameSite=Lax, which means this behavior will be experienced across all browsers.

As I said this should only affect users that were using my extension in an already unsupported manner. But if you are affected and have suggestions regarding the handling of cookies, feedback is welcome.

I could offer an option to force Flarum cookies to use SameSite=None, but that seems counter-productive for security. Especially since my extension still wouldn't fully support global login for such setups.

My recommendation continues to be to only use this extension for contexts where Wordpress and Flarum share a common origin.

9 days later

hrvoje_hr no, the extension is currently incompatible with Flarum beta 14. The constraints will prevent you from upgrading.

An update was prepared a few weeks ago I just need to test it against the final beta 14 release. It will be released within a week.

    Is it able to import existing WordPress comments? I'm thinking about to migrate from existing comments to the plugin one.

      codemotion not yet, but this might be coming in a future update.

      In the meantime it's still possible to manually import them, but that does require a fair amount of manual work.

        8 days later

        Flarum extension versions 1.6.1 & 1.6.2 - November 3, 2020

        • Flarum beta 14 compatibility

        Version 1.6.1 contained a bug. 1.6.2 fixes it.

        This version can only be installed on Flarum beta 14.

        The new version will automatically be installed when you migrate to Flarum beta 14 with Flarum's official instructions.
        Requires version 1.4 or greater of the Wordpress plugin.

          BigMinnie I still can't offer any timeline. There are other requested features that I will most likely implement first.

          Having studied other comment embed platforms, it seems most of them do use an iframe. They just load it with javascript and have a more polished design that makes it look like the iframe is part of the website. The fully no-iframe implementation will likely be a lot of work and also add some additional constraints on cookies and headers for the host.

          I'm still not sure how the current solution impacts your load time? The iframe shouldn't prevent the page from rendering. If there's an actual problem on that side I can add some way of delaying the rendering of the iframe in Wordpress.

              clarkwinkelmann They just load it with javascript and have a more polished design that makes it look like the iframe is part of the website.

              For the start this could probably work but when I tried the current iframe load times jumped + few seconds, it does not sound a lot but it didn't work for my website.

                  BigMinnie how do you measure the load time?

                  If you're using a tool that waits until everything renders including the iframe, it will definitely increase the time. But the iframe loading shouldn't be blocking. The user should see the base page render and it should be interactive before the iframe is ready. And because the iframe is lower in the page the additional load time for the iframe shouldn't very noticeable by the visitor since they can't see the iframe at first anyway.

                  Loading the iframe with JS could trick an analytics script into thinking the load time is faster. But in practice I don't think it wouldn't change anything for the visitor. But it could have SEO benefits if that value is indeed used to lower your SEO score.

                  One benefit of JS+iframe is that we can delay the iframe rendering until it gets into view. This can save up on data usage and server load if you've got many page views but not everyone scrolling to the comments, but won't make things any faster for the visitors who actually scroll to the comments (in fact, the opposite, depending on how late we trigger the loading when the user scrolls).

                  If there's something slowing down the initial page render of Wordpress, I will definitely fix it. Just let me know which tools return bad scores and I will try to optimize based on their suggestions.

                    14 days later

                    clarkwinkelmann Hello, I tried to install your extension after you annonce beta 14 compatibility on my fresh flarum install. But, it apparently can't install on this version

                    [InvalidArgumentException]
                    Could not find a matching version of package kilowhat/flarum-ext-wordpress. Check the package spelling, your version constraint and that the package is available in a stability which matches your
                    minimum-stability (stable).

                    It's maybe me, but not sure, so is your extension on a fresh Flarum 14 installation compatible or not?

                    Thx for answer

                    Best regards

                        Amarok have you configured your composer.json for Extiverse? The instructions can be found at https://kilowhat.net/flarum/extensions/wordpress#installation Is this your first premium extiverse Extension? The error message looks like what appears when Composer cannot find the package at all, which could mean missing Extiverse repository.

                        If Composer is correctly configured for Extiverse, you could use the following commands to maybe get more details: composer why-not kilowhat/flarum-ext-wordpress.

                            clarkwinkelmann it's not the first time I install this and checked with my other installation. It's seems to be a clone (without other extensions)

                            With the command just have this answer :

                            [InvalidArgumentException]
                            Could not find package "kilowhat/flarum-ext-wordpress" in your project

                            I had cherck many times, and redo all from 0 but.. still same answer when I want to install it :S

                            so, another question, is it possible to have multi-installation of this extension or not? 😉

                                Amarok if you moved hosting or something like that, make sure you re-run the Extiverse commands to re-configure the repository and the access token. If you have multiple forums, make sure you use the same token everywhere, because requesting a new token on Extiverse invalidates the old one. But there should be a different error message if you have an invalid token...

                                You could try to install a specific version, but I'm not sure whether it would give much more success if the base command doesn't work: composer require kilowhat/flarum-ext-wordpress:^1.6.2

                                Amarok so, another question, is it possible to have multi-installation of this extension or not

                                If you are referring to the licensing, you should check Extiverse terms. You are allowed to install on multiple of your own forums but not re-sell or subcontract hosting.

                                If you are referring to Wordpress multi-site, this has not been tested.

                                      clarkwinkelmann You could try to install a specific version, but I'm not sure whether it would give much more success if the base command doesn't work: composer require kilowhat/flarum-ext-wordpress:1.6.2

                                      I redo again all and checked 2 times

                                      • adding the extiverse requirement ("repositories": [{"type": "composer", "url": "https://extiverse.com/composer/"}],)
                                      • running the command to add the token in the SSH

                                      But nothing changed :S

                                      • Is there a solution to be sure I can access to exstiverse server with a little command?
                                      • Are-you sure we can install it on a fresh install of Flarum 14? (sorry to ask but maybe..... who knows). Because the documentation still requists Flarum 13 😉

                                      clarkwinkelmann If you are referring to the licensing, you should check Extiverse terms. You are allowed to install on multiple of your own forums but not re-sell or subcontract hosting.

                                      Just installing on different wordpress installation 🙂 Thx for answered.

                                      sorry for my bad english ^^

                                            Amarok Apparently had same problems with other extensions...
                                            Will recheck the full installation of Flarum. Strange having those problem, didnt with another installation

                                            Sorry for the stress... maybe it's just a Flarum 14 problem or my install.

                                            Thx a lot to quickly answered. I'll come back if had problems just with your extensions and not with all :S (didn't checked this before. My bad)

                                            That's happen when you write the rights commands but.. in a wrong directory.. welcome in my world.. hum again, sorry for the inconvenience.

                                            So, in the right Directory, all work fine 😅

                                            Again thx for all.. and shame on me

                                                Amarok glad you figured it out! These things happen 🙉

                                                If you have multiple Wordpress installations of your own, you are welcome to use the extension on several of them at the same time with a single license. Flarum can only connect to one Wordpress at a time with this extension, but you can have multiple pairs of forum-website with a single license, no problem.

                                                  I think the integrated design should change in Wordpress. Maybe something similar to Disqus? It could become great alternative to it.

                                                    ZaKeks I'm hoping to have something a bit more polished like Disqus in the future. You can already achieve a lot with just custom CSS in Wordpress. Right now I include a visible border because I still rely on the scroll-based auto-load of Flarum, and having scroll without border looks odd.

                                                    Once I find a solution to drop scroll-based load and switch to button-based load like Disqus, I'll try to hide the border of the iframe entirely.

                                                    As for multi-level comments, I'd love to have that, but it would be a separate extension. I know there was one in the work, but I haven't tested it together with this the Wordpress extension yet.