Restrict guest access to forum

devdevov

Hi,
I have a WordPress website and a Flarum in a subdomain.
I installed the SSO extension, so I login & register via WP. If I logout I still have access to the forum app.
I want to restrict all forum access to only registered users.
I already searched in extension and other topics and didn't found something similar. I found "Landing Page" extension but is not exactly what I am trying to achieve.
I would like to make a basic redirect to WP login/register page if the user is not logged in.

luceos

devdevov this one might be helpful, not sure you already found this?

https://extiverse.com/extension/sycho/flarum-private-facade

Your forum becomes immediately private if you put the global Read Discussions permission to Members. The Private Facade by @SychO adds a sweet layer on top of such a platform.

devdevov

luceos Yeah! I already saw it.
The idea is that I want to force the user to login via Wordpress and not via Flarum.
In the Admin Configuration I already restricted all to Members but still they can access the empty forum.

luceos

devdevov Okay 😉

This prevents log in from any other source than the wp log in: https://extiverse.com/extension/gaoxing520/flarum-third-party-login-only
And this one offers log in through wordpress: https://kilowhat.net/flarum/extensions/wordpress

I am not entirely sure this meets all your criteria. Understand that you can also get your exact wishes commissioned, for that you'll need to create a request under services.

PS in hindsight, Private Facade should just work with a third party log in. It also forces guests to the log in, without making the empty index visible.

devdevov

Ok, thank you luceos

I alreadey achieved the login via SSO with Wordpress.
The problem I am trying to solve is to restrict Guest Access to Flarum, if the user is not authenticated to redirect them to Wordpress login.

I will search some more info and if I don't find anything I will try to make a basic extension for this.

devdevov

A basic way to achive this is to check if the "app.session.user" exists, if doesn't exist redirect the user to WP Login.