Third Party Login only - Block standard login

JasperVriends

📰 Flarum Third Party Login only

Only allow login and sign ups from oAuth extensions.

If you have any feedback, let us know! Do you experience issues? You can report issues on the Flarum Forum or on GitHub.

⚠️ Be careful: This extension completely disables the Login and Registration forms.

Did you lock yourself out? You're not the only one... Read how to fix that.

ℹ️ When to use this extension?

To be clear, this extension does not add oAuth to your Flarum instance but instead disables the Sign In and Sign Up password-forms for a better authenticating flow user experience. Use FoF Passport or FoF oAuth to add oAuth to your forum.

This extension is suitable for organizations or communities that only want to allow sign-in and sign-ups with external oAuth accounts/providers.

🛠️ Latest update: August 9th, 2021 - Version v0.1.1

Previous updates:

August 9th, 2021 - Version v0.1.1
August 3th, 2021 - Version v0.1.0 (Release)

📥 Installation

If you like to install this extension, run the following command:

composer require v17development/flarum-third-party-login-only

♻ Updating

Run the following command on your server to update the plugin

composer update v17development/flarum-third-party-login-only

🦸 Features

Disables /login, /api/login and removes login form
Disables /register if there's no oAuth-sign-in token and removes registration form
Disables /reset & /api/forgot routes and removes password reset form
Managing new signups via oAuth extensions is still possible with the Allow signups permission
Makes it possible to add a welcome message for new users

Knowledge base articles:

🔨 Works with:

🙋 Questions, feedback?

If you have any questions related to this extension, don't hesistate and reply to this topic or open an issue.

❤️ Sponsored by Buttonizer

This extension is sponsored by Buttonizer.

🖼️ Screenshots

Sign In window

After activating this extension, the sign in form is removed, only oAuth buttons are visible. The "Forgot password" link is only visible when a "Forgot password link" is set-up.

If the Replace Sign In and Sign Up button setting is enabled, the Log in window will not be visible and automatically opens the FoF Passport oAuth sign in window.

Custom Sign Up text

If set, a custom welcome text will be visible after authenticating with new accounts.

Admin settings

Hari

JasperVriends Welcome back

Hari Thanks again to the sponsor and you, you guys rock. 🤘 These days whatever thoughts* come to my mind are turning into extensions automatically, all positive vibes around flarum ❤️💐

I'm enjoying the extensions rain ⛈

to disable forgot password button add this in custom CSS

.LogInModal-forgotPassword {
display: none;
}

djemyjenab

JasperVriends I just enable the thirt party login only. Forget Im login using username. How can I login back for administrator ?

JasperVriends

Release v0.1.1 - Bug fixes

This release will fix some issues when authenticating with a new account and signing up.

Changelog:

Re-enabled /register route, replaced POST /users route
Hide 'Forgot password' link when not set

How to update?

To update, run:

composer update v17development/flarum-third-party-login-only

To install, run:

composer require v17development/flarum-third-party-login-only

If you have feature requests, create an issue on GitHub 😎

Hari Thanks for the feedback. Screenshots are added and the forgot-password link has been hidden in this release 🙂

KakaLVPOT Good feature requests. Please add them to the GitHub issues.

KakaLVPOT I and most other experienced people

Regarding tot his, I personally don't like this mindset. Needs are different per Flarum set-up and can be different per situation. Also, always test extensions locally or on a development environment before adding them to an production environment. The documentation and readme of this extension should be clear.

doublethinker

Hi, it seems like this extension conflicts with the fof/ban-ips extension:

[2021-08-10 12:01:37] flarum.ERROR: RuntimeException: Route login not found in /opt/flarum/vendor/flarum/core/src/Http/RouteCollection.php:159
Stack trace:
#0 /opt/flarum/vendor/fof/ban-ips/src/Middleware/RegisterMiddleware.php(59): Flarum\Http\RouteCollection->getPath()
#1 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): FoF\BanIPs\Middleware\RegisterMiddleware->process()
#2 /opt/flarum/vendor/fof/oauth/src/Middleware/ErrorHandler.php(50): Laminas\Stratigility\Next->handle()
#3 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): FoF\OAuth\Middleware\ErrorHandler->process()
#4 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ContentTypeOptionsHeader.php(21): Laminas\Stratigility\Next->handle()
#5 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ContentTypeOptionsHeader->process()
#6 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ReferrerPolicyHeader.php(30): Laminas\Stratigility\Next->handle()
#7 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ReferrerPolicyHeader->process()
#8 /opt/flarum/vendor/flarum/core/src/Http/Middleware/FlarumPromotionHeader.php(30): Laminas\Stratigility\Next->handle()
#9 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\FlarumPromotionHeader->process()
#10 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ShareErrorsFromSession.php(57): Laminas\Stratigility\Next->handle()
#11 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ShareErrorsFromSession->process()
#12 /opt/flarum/vendor/flarum/core/src/Http/Middleware/CheckCsrfToken.php(36): Laminas\Stratigility\Next->handle()
#13 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\CheckCsrfToken->process()
#14 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ResolveRoute.php(67): Laminas\Stratigility\Next->handle()
#15 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ResolveRoute->process()
#16 /opt/flarum/vendor/flarum/core/src/Http/Middleware/SetLocale.php(51): Laminas\Stratigility\Next->handle()
#17 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\SetLocale->process()
#18 /opt/flarum/vendor/flarum/core/src/Http/Middleware/AuthenticateWithSession.php(31): Laminas\Stratigility\Next->handle()
#19 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\AuthenticateWithSession->process()
#20 /opt/flarum/vendor/flarum/core/src/Http/Middleware/RememberFromCookie.php(52): Laminas\Stratigility\Next->handle()
#21 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\RememberFromCookie->process()
#22 /opt/flarum/vendor/flarum/core/src/Http/Middleware/StartSession.php(61): Laminas\Stratigility\Next->handle()
#23 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\StartSession->process()
#24 /opt/flarum/vendor/flarum/core/src/Http/Middleware/CollectGarbage.php(46): Laminas\Stratigility\Next->handle()
#25 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\CollectGarbage->process()
#26 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ParseJsonBody.php(28): Laminas\Stratigility\Next->handle()
#27 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ParseJsonBody->process()
#28 /opt/flarum/vendor/flarum/core/src/Http/Middleware/HandleErrors.php(57): Laminas\Stratigility\Next->handle()
#29 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\HandleErrors->process()
#30 /opt/flarum/vendor/flarum/core/src/Http/Middleware/InjectActorReference.php(25): Laminas\Stratigility\Next->handle()
#31 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\InjectActorReference->process()
#32 /opt/flarum/vendor/laminas/laminas-stratigility/src/MiddlewarePipe.php(76): Laminas\Stratigility\Next->handle()
#33 /opt/flarum/vendor/middlewares/request-handler/src/RequestHandler.php(84): Laminas\Stratigility\MiddlewarePipe->process()
#34 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Middlewares\RequestHandler->process()
#35 /opt/flarum/vendor/middlewares/base-path-router/src/BasePathRouter.php(101): Laminas\Stratigility\Next->handle()
#36 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Middlewares\BasePathRouter->process()
#37 /opt/flarum/vendor/laminas/laminas-stratigility/src/Middleware/OriginalMessages.php(36): Laminas\Stratigility\Next->handle()
#38 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Laminas\Stratigility\Middleware\OriginalMessages->process()
#39 /opt/flarum/vendor/middlewares/base-path/src/BasePath.php(73): Laminas\Stratigility\Next->handle()
#40 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Middlewares\BasePath->process()
#41 /opt/flarum/vendor/flarum/core/src/Http/Middleware/ProcessIp.php(24): Laminas\Stratigility\Next->handle()
#42 /opt/flarum/vendor/laminas/laminas-stratigility/src/Next.php(51): Flarum\Http\Middleware\ProcessIp->process()
#43 /opt/flarum/vendor/laminas/laminas-stratigility/src/MiddlewarePipe.php(76): Laminas\Stratigility\Next->handle()
#44 /opt/flarum/vendor/laminas/laminas-stratigility/src/MiddlewarePipe.php(65): Laminas\Stratigility\MiddlewarePipe->process()
#45 /opt/flarum/vendor/laminas/laminas-httphandlerrunner/src/RequestHandlerRunner.php(96): Laminas\Stratigility\MiddlewarePipe->handle()
#46 /opt/flarum/vendor/flarum/core/src/Http/Server.php(44): Laminas\HttpHandlerRunner\RequestHandlerRunner->run()
#47 /opt/flarum/public/index.php(26): Flarum\Http\Server->listen()

As a fairly important side question, with this extension activated- is there any way for an admin account to login manually (without OAuth)?

PascalBoschma

doublethinker Hello!

Thank you for reporting. Could you create an issue in the GitHub repository for this extension? We'll take a look as soon as possible.

Best regards,

idkwhatusername

Hey, I have enabled this and logged out. I can't login to my admin account :/

There should be added some option in settings to link oauth accounts to existing user. Is this possible?

And what can I do now, how to login to my admin account or give me admin on new account created with oauth. I use freeflarum

clarkwinkelmann

idkwhatusername you should probably contact the FreeFlarum support to have them disable the extension for you until you regain access to your admin panel.

idkwhatusername

clarkwinkelmann i have solved it by changing Discord email to email that I use for forum and then changing it back.

idkwhatusername

There should be added some option in settings to link oauth accounts to existing user. Is this possible?

anonymousDev

idkwhatusername There should be added some option in settings to link oauth accounts to existing user. Is this possible?

It should be one of default options wduring plugin installation in fact.

Hari

How can i use this extension and only disable regular signup and still allow social login or signup?

I want my existing users to log in using their username and password. currently, i am hiding the signup button using CSS

adam42

I'm using Third-Party-Logins-Only which really does the job on the login form.

It works well with FoF OAuth & NextCloud. The only nice-to-have would be the ability to remove the Sign Up link on the top menu bar. I see the option toggle in the admin screen for FoF/Passport but I daren't try it with FoF/OAuth. Should I?

adam42

Found this: flarum/issue-archive380

But I still don't understand whether I can disable the sign-up button. Anybody?

JasperVriends

adam42 Hey! Glad to hear you like this extension. You can read more about disabling the registration of accounts here: https://community.v17.dev/knowledgebase/44-authenticating-new-accounts

If you disable registrations, the sign-up button will disappear. Or would you like to keep the registrations open and only hide the button?

adam42

I see - mostly 🙂 Thanks.

JasperVriends

djemyjenab Oh, so I have to think about more warnings now 😂

There are two options:

You can try signing in with the oAuth platform you have enabled on your forum. If your email address matches, it will automatically connect the account to your original admin account
You can disable the extension via the database

Let me know if this helps 🙂

djemyjenab

JasperVriends I try login via twitter that I think use the same email.. But still give me permission as User.

Can guide me how to disable it via database ?

Update: I just disable it via database. Refer to this link. Thank you @JasperVriends

Go to PHPMyAdmin and search for %enable%, locate the settings table and delete the extensions that are enabled.

Link : disable extension via database

JasperVriends

djemyjenab Ah, I'm glad to hear you have found a way!

I've quickly wrote a short knowledge base article which I will mention in the main post in any case this happens again to someone else: https://community.v17.dev/knowledgebase/45-i-locked-myself-out

« Previous Page