Single Sign On

ikonrad

wuethrich Thanks for the reply!
On flarum, you can still log in without being activated (which is the case in my application as well) so I'm not sure where the assumption that being able to log in = user confirmed comes from.

wuethrich

ikonrad Sorry but I don't understand your exact use case but you can provide a PR to make activating users configurable and I will publish a new version.

aimerforreimu

Hi
There have a problem . When I use composer install Single Sign On , my service tell my some thing wrong
like this

Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - wuethrich44/flarum-ext-sso v1.1.1 requires flarum/core ^0.1.0-beta.6 -> satisfiable by flarum/core[0.1.x-dev, v0.1.0-beta.6, v0.1.0-beta.7] but these conflict with your requirements or minimum-stability.
    - wuethrich44/flarum-ext-sso v1.1.0 requires flarum/core ^0.1.0-beta.6 -> satisfiable by flarum/core[0.1.x-dev, v0.1.0-beta.6, v0.1.0-beta.7] but these conflict with your requirements or minimum-stability.
    - Installation request for wuethrich44/flarum-ext-sso ^1.1 -> satisfiable by wuethrich44/flarum-ext-sso[v1.1.0, v1.1.1].
Installation failed, deleting ./composer.json.

luceos

aimerforreimu make sure you are in the directory you installed Flarum in.

wuethrich

aimerforreimu I just released a new version which requires 0.1.0-beta.7. Does the new version fix your issue?

aimerforreimu

THX!

aimerforreimu

I did what you said, but my Flarum did not respond. Can you tell me how to debug this program?

KillMeNext

Hey there, I am unable to get this to work unfortunately. When I sign up, it creates the user in WP, when I login it takes me to the WP user page. If I go to my forum and login, it takes me to the WP page, I login, it then finally takes me back to the forum but I am not logged in, it just has the sign up or login button again and continues to do so. If I go to WP it shows me as logged in there it just is not transferring over to Flarum for some reason.

I, of course, have the api_key and what not in the db and did everything that was shown in the instructions.

I have these in the access log, but nothing I am seeing wrong in the error log

[12/Feb/2018:22:33:45 +0000] "GET /wp-login.php?redirect_to=forum HTTP/1.1" 200 1600 "https://changed_for_security/forum/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
[12/Feb/2018:22:33:48 +0000] "POST /forum/api/token HTTP/1.1" 401 3399 "-" "-"
[12/Feb/2018:22:33:48 +0000] "POST /forum/api/users HTTP/1.1" 422 3500 "-" "-"
[12/Feb/2018:22:33:48 +0000] "POST /forum/api/token HTTP/1.1" 401 3399 "-" "-"

Also, nothing related in the actual Flarum logs, it just simply isn't doing anything it seems.

My WP is in domain.com and forum is domain.com/forum if that makes any sort of difference. Everything else is working fine for both, just not logging in to the forum now.

I am assuming the random key I made up and put into the api_key in the db then goes into the config, and then I just type a random key into password token? I figured I would try it with nothing written in the api_key or password key fields and it acts the exact same was as when I do have the key in there and there are no errors or anything still.

wuethrich

KillMeNext Looks like you're authentication against the Flarum API doesn't work because you get a 401 as a response code. Please check your config.php and the token in the database.

There should be a user created in the Flarum DB after successful login to WP.

KillMeNext

Looking more into this. I see a user in the WP DB from when I used the link on the forum, registered, confirmed, etc. If you hit login on the forum it takes you back to WP, you login, but then when you redirect to the forum, nothing happens. I looked at the Flarum DB, there were no new entries in there. Is there supposed to be one when someone signs up via wordpress, or is it all just stored in the WP DB at that point?

KillMeNext

I have made sure to check that, I believe I have done so 10+ times. The password key, does it also go in the DB or just the config? It does not look like it should, but just want to make sure because I have tried everything else I can think of.

I have everything in front of me and opened, if you can let me know what else to check?

It gets all the way to being able to redirect back to Flarum, but no user gets created. The wordpress side of course is fine since that is where I made the account.

wuethrich

KillMeNext Oh I missed the 422...

Could you make a var_dump($response) from this line and send it to me?

KillMeNext

Sure (I just have to look up quick how to do that, lol)

Looking up the function I came across this. I am assuming I put that in a php file and change the contents part to my site? Changing it to response, obviously, but do I actually put that into the api/users, or just reference it somehow externally?

<?php
function get_contents() {
file_get_contents("http://example.com");
var_dump($http_response_header);
}
get_contents();
var_dump($http_response_header);
?>

Do you know what file and line it needs to be located at?

KillMeNext

I tried to put this in fileflarum-sso/Forum.php where I saw the response from user, but nothing showed up when I ran through the code. Isn't it supposed to display on screen, or did I do it wrong?

$response = $this->sendPostRequest('/api/users', $data);
var_dump($response);
return isset($response['data']['id']);

KillMeNext

Well, this was sure helpful. Oh well, I guess.

MingZ

Nice extension, good job !

Got couple of questions(Solution found after installing the extension):

Has anyone successfully removed/disabled the default Flarum register/login component ?
-- Found this extension will all user to redirect login, logout and signup to parent domain. ?
Has anyone removed/disabled the login profile setting page ?

-- Found the profile setting will be removed after installing this extension. ?

kmk

This extension can be apply for Invisionpower suite? I have community build with IPS, but I want replace forum of ips with Flarum, so I still use others apps of ips but when user want use forum(flarum) they don't need register again and sign in 2 times(one time for ips and other time for Flarum).

MingZ

UaMV

Hi @UaMV

How did you clear cookies for both sub domain and primary domain ?

I tried to use PHP unset() and setcookie('flarum_remember', '', time() - 10, '/' ).
None of them are working on my server. var_dump($_COOKIE) is always showing an unknown token on "flarum_remember"

Did you use javascript to clean the client's cookies on browser ?

==================== Update
Never mind. It was because of my browser cookie setting. I used the incognito mode on Google Chrome, and it started to work.

oswinondarza

Great Extension ! thanks a lot. The only thing not working for me is the logout. The logout integration following the sample_website example successfully removes the "flarum_remember" which it great, however my user in flarum is still logged in. Everything is working fine cause I can see the "flarum_remember" cookie removed, however I still see a "flarum_session" cookie living in the flarum subdomain. Do I need to also remove this "flarum_session" in order to have the user completely logged out ?

I tried these modifications adding a new variable in the config, but still no luck, user is still logged in in flarum.

public function logout()
{
    $this->removeRememberMeCookie();
    $this->setCookie('flarum_session', '', time() - 10);
}

private function setCookie($key, $token, $time)
{
setcookie($key, $token, $time, '/', $this->config['root_domain']);
setcookie($key, $token, $time, '/', $this->config['forum_subdomain']);
}

Thanks for any help provided !

clarkwinkelmann

oswinondarza there is an issue with logout response cookies having wrong settings and not being deleted correctly in particular circumstances with Flarum logout route in beta7. There is already a fix in beta8.

Here's where I encountered the issue when making an extension https://github.com/flagrow/impersonate/blob/f7332752ee57fcf41eb11f9711d3ccbfcf5219f4/src/Controllers/LoginController.php#L56 .

Not sure if it's related to your case or not at all. Putting this here just in case.

« Previous Page Next Page »