• Extensions

  • FoF passport, the Laravel passport oauth extension

So just a follow up, I got this working as a result of...

1. getResourceOwnerDetailsUrl Change

The getResourceOwnerDetailsUrl function needed to be changed from:

return $this->settings->get('flagrow.passport.app_user_url');

to the following:

return $this->settings->get('flagrow.passport.app_user_url')."?access_token=".((string) $token->getToken());

If there is any possibility of getting an upstream option in your project to pass optional params with a replacer for it, that'd be amazing.

2. Added a result private variable to ResourceOwner

I added:

private $result as a variable, added the following in the constructor:

$this->result = $response["result"];

3. Change ResourceOwner getValueByKey function calls

Phabricator returns user info as a "results" array which has:

  • phid instead of id
  • primaryEmail instead of email
  • userName instead of name

Additionally needed to change $this->response to $this->result

Is there any remote possibility of expanding your extension to support further configuration options such as the above (or handling their cases)? I'd prefer to not have to maintain a fork, but happy to do so if you have no desire to expand your extension to handle the cases above.

    5 days later

    I have run the command in flarum folder, everything looks fine. But where I could set the configuration? with OAuth authorization url things...
    Please help...

      XiaozhouSong But where I could set the configuration? with OAuth authorization url things...

      1. Go to Administration backend
      2. Go to Extensions
      3. Enable "Flagrow Passport" by checking it
      4. Click the vertical ellipsis (â‹®) button when you're hover over that extension.
      5. Click Settings.

      This is the standard way of changing extension settings.

          JoshStrobl yes I can take care of that. Please feel free to create an issue or pr on the github repository.

              2 months later

              luceos , how can I restrict all login options except flagrow passport oauth provider? I want user to click login and redirected to oauth server without login possibility using internal flarum system

                  Brightside56 I'm not behind a PC. But it's possible, I've done it on the flagrow.io forum. Let me know if you need the source.

                      Hello,
                      I'm trying to use this extension using a custom oauth2 server (implemented with oauth-server-php). But, during my try in localhost, I have an issue with the redirect url generated by the extension.
                      My flarum instance is installed in https://localhost/foo/bar/flarum, but the redirect uri generated in PassportController is https://localhost/auth/password. So, after the connection, the redirect doesn't work.
                      Furthermore, after modified with a hardcoded url in PassportController, I have a generic error, without any information to help me understand the issue. Does it exist a place with log?

                        JonathanMM I have a generic error, without any information to help me understand the issue

                        Have you checked in <flarum>/storage/logs and your webserver logs ? Or try with debug mode enabled in config.php

                            clarkwinkelmann Oh thanks. Ok my issue is concerning SSL certificate, after put it in a server, it is fixed. Thanks 🙂
                            May be have more doc like the fields waiting by the token endpoint can be help 😉

                              5 months later

                              ceerker is the redirect url on the exact same domain you used to open Flarum (clicking login from no-www and being redirected to www subdomain could cause this for example I believe)

                                ceerker I don't know if it is the case, but suppose you go to https://indieclub.one, click the login inside Flarum, get redirected to account.indieclub.one for login, and then get redirected to https://www.indieclub.one, this could cause an error like the one you have.

                                If you have setup canonical urls correctly (I suppose you have) it should always redirect to www so this wouldn't be possible.

                                  7 days later

                                  Invalid state is often caused by a misconfiguration, it's hard to tell without any additional information ceerker