Make forum can only be logged in with OAuth

LuoTR

I'm making an extension to allow my forum be able to login with Steam. However, I don't want to ask users to register after they logged in on Steam. The extension should register a user using thier unique Steam ID, without email and password for them, then log in for users automatically. Which means my forum won't allow log in with username and password, only log in with Steam is allowed. Also, register will be disabled too. I have done the OAuth part already, but I have no idea for Flarum's user part.

Hari

LuoTR i don't know is it okay to involve in this or not. (community guidelines)

😍😍😍😍 finally someone is working on it

could you add turn off native login and password button at admin .. as they have done with SSO

please do support google, fb, Twitter too 🤤 and also do add a setting on/off to let users choose a username as currently fof oauth is doing this. you know sometimes we want users to choose their fav username.

luceos

LuoTR the default oauth flow of Flarum still asks for information. I think you could override the callback endpoint of the user (/auth/steam) to create the user, log them in and redirect them back to wherever they wanted to go.

I am not entirely sure how easily this can be done, but I've built similar (simpler) flows in the past without oauth2 that did exactly that.

PS welcome to the Flarum community, as a Steam enthusiast it's great to see someone pick this up 👏

LuoTR

luceos Is it safe to create a user without a password? And how do I log them in if the user doesn't have a password? That's what I am wondering.

luceos

LuoTR your code should probably create a random password, that's what flarum does too.

LuoTR

luceos Tried to create a login logic from Flarum's code, but I got an error. Did I do wrong, or it shouldn't be like this.

Error thrown with message "Call to undefined method Flarum\User\Event\LoggedIn::__invoke()"

Stacktrace:
#57 Error in D:\RHDProjects\full-website\vendor\illuminate\container\BoundMethod.php:36
#56 Illuminate\Container\BoundMethod:Illuminate\Container\{closure} in D:\RHDProjects\full-website\vendor\illuminate\container\Util.php:40
#55 Illuminate\Container\Util:unwrapIfClosure in D:\RHDProjects\full-website\vendor\illuminate\container\BoundMethod.php:93
#54 Illuminate\Container\BoundMethod:callBoundMethod in D:\RHDProjects\full-website\vendor\illuminate\container\BoundMethod.php:37
#53 Illuminate\Container\BoundMethod:call in D:\RHDProjects\full-website\vendor\illuminate\container\Container.php:651
#52 Illuminate\Container\Container:call in D:\RHDProjects\full-website\vendor\illuminate\bus\Dispatcher.php:128
#51 Illuminate\Bus\Dispatcher:Illuminate\Bus\{closure} in D:\RHDProjects\full-website\vendor\illuminate\pipeline\Pipeline.php:128
#50 Illuminate\Pipeline\Pipeline:Illuminate\Pipeline\{closure} in D:\RHDProjects\full-website\vendor\illuminate\pipeline\Pipeline.php:103
#49 Illuminate\Pipeline\Pipeline:then in D:\RHDProjects\full-website\vendor\illuminate\bus\Dispatcher.php:132
#48 Illuminate\Bus\Dispatcher:dispatchNow in D:\RHDProjects\full-website\vendor\illuminate\bus\Dispatcher.php:78
#47 Illuminate\Bus\Dispatcher:dispatch in D:\RHDProjects\full-website\packages\rhodes-island-flarum-extension\src\Controller\SteamAuthController.php:85
#46 RhodesIsland\FlarumExtension\Controller\SteamAuthController:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\RouteHandlerFactory.php:41
#45 Flarum\Http\RouteHandlerFactory:Flarum\Http\{closure} in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ExecuteRoute.php:27
#44 Flarum\Http\Middleware\ExecuteRoute:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#43 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ContentTypeOptionsHeader.php:21
#42 Flarum\Http\Middleware\ContentTypeOptionsHeader:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#41 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ReferrerPolicyHeader.php:30
#40 Flarum\Http\Middleware\ReferrerPolicyHeader:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#39 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\FlarumPromotionHeader.php:30
#38 Flarum\Http\Middleware\FlarumPromotionHeader:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#37 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ShareErrorsFromSession.php:57
#36 Flarum\Http\Middleware\ShareErrorsFromSession:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#35 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\CheckCsrfToken.php:36
#34 Flarum\Http\Middleware\CheckCsrfToken:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#33 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ResolveRoute.php:67
#32 Flarum\Http\Middleware\ResolveRoute:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#31 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\SetLocale.php:51
#30 Flarum\Http\Middleware\SetLocale:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#29 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\AuthenticateWithSession.php:31
#28 Flarum\Http\Middleware\AuthenticateWithSession:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#27 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\RememberFromCookie.php:52
#26 Flarum\Http\Middleware\RememberFromCookie:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#25 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\StartSession.php:61
#24 Flarum\Http\Middleware\StartSession:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#23 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\CollectGarbage.php:46
#22 Flarum\Http\Middleware\CollectGarbage:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#21 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ParseJsonBody.php:28
#20 Flarum\Http\Middleware\ParseJsonBody:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#19 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\HandleErrors.php:57
#18 Flarum\Http\Middleware\HandleErrors:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#17 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\InjectActorReference.php:25
#16 Flarum\Http\Middleware\InjectActorReference:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#15 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\MiddlewarePipe.php:76
#14 Laminas\Stratigility\MiddlewarePipe:process in D:\RHDProjects\full-website\vendor\middlewares\request-handler\src\RequestHandler.php:84
#13 Middlewares\RequestHandler:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#12 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\middlewares\base-path-router\src\BasePathRouter.php:101
#11 Middlewares\BasePathRouter:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#10 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Middleware\OriginalMessages.php:36
#9 Laminas\Stratigility\Middleware\OriginalMessages:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#8 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\middlewares\base-path\src\BasePath.php:73
#7 Middlewares\BasePath:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#6 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Middleware\ProcessIp.php:24
#5 Flarum\Http\Middleware\ProcessIp:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\Next.php:51
#4 Laminas\Stratigility\Next:handle in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\MiddlewarePipe.php:76
#3 Laminas\Stratigility\MiddlewarePipe:process in D:\RHDProjects\full-website\vendor\laminas\laminas-stratigility\src\MiddlewarePipe.php:65
#2 Laminas\Stratigility\MiddlewarePipe:handle in D:\RHDProjects\full-website\vendor\laminas\laminas-httphandlerrunner\src\RequestHandlerRunner.php:96
#1 Laminas\HttpHandlerRunner\RequestHandlerRunner:run in D:\RHDProjects\full-website\vendor\flarum\core\src\Http\Server.php:44
#0 Flarum\Http\Server:listen in D:\RHDProjects\full-website\public\index.php:26

luceos

Hard to say without seeing the code here: rhodes-island-flarum-extension\src\Controller\SteamAuthController.php:85 🙂

LuoTR

luceos

// $events is Flarum\Bus\Dispatcher, defined in __construct
Dispatcher $events
// $users is Flarum\User\UserRepository, defined in __construct
UserRepository $users

$user = $this->users->findByIdentification($suggestions['id']);
if ($user == null) {
    $user = User::register($suggestions["id"], "", md5(md5($suggestions["id"]).md5(time()).md5($this->generateRandomString())));
}
$user->touch();
$user->is_email_confirmed = true;
$user->activate();
$user->save();

$token = RememberAccessToken::generate($user->id);
$token->touch($request);

$this->events->dispatch(new LoggedIn($user, $token));

LuoTR

The problem is that the way I create a user or login is wrong.. I don't really know how to do it.

[deleted]

https://api.flarum.org/php/master/flarum/user/user#method_register

Steam OAuth does not seem to be able to return an email address, you can use a random email address.