Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
33 views

Instructions for external or integrating auth?

I'm looking to either use my own auth or use Craft's for additional functionality outside of Craft. Our client has some very specific requirements that we'll be building separately and we'd like to ...
0
votes
1answer
65 views

How to override UserController.actionLogin or the login form template in Craft 3?

Hi I'm trying to build a custom authentication plugin for an organization, and I'm having a hard time figuring out how to override the craft\controllers\UserController.actionLogin method. I tried ...
2
votes
0answers
201 views

How to authenticate as a Craft user with a frontend tool like Next.js, Nuxt.js, or create-react-app?

We're looking to use Craft CMS as an application platform (handling content storage, user authentication, etc) for an upcoming project while leveraging something like Next.js on the front-end. Here's ...
1
vote
0answers
87 views

User Event before Login - check if user has password and logged in before

Is there a User Event before the authentication is fired? I want to show a message if the user doesn't have a password yet and if it's his first login / check if he never logged in before - All in ...
0
votes
0answers
41 views

Logging into CP doesn't set authentication cookie

Trying to debug an issue where in a dev environment logging into the cp it doesn't set the CP Authentication Cookie (the hash with the _identity) at the end of it. I believe this is the root cause of ...
2
votes
1answer
111 views

Logging in to Craft via Vue/Javascript apps

I'm just diving into the world of javascript frameworks (late to the party I know) and can't figure out the missing piece of the authentication puzzle. What is the preferred way to authenticate users ...
1
vote
2answers
146 views

Craft CMS module composer dependancy

After some research surrounding this I can't seem to fix this issue. So for a project I made a simple module with some variables that simply has to make an OAuth1 call and return some data. The ...
2
votes
1answer
1k views

Craft 3 Element API Authentication/Login

First things first: This is quite similar to this, yet different. I'm trying to get authentication/login for Element-API for Craft 3 to work. Meaning I would like to restrict access to certain ...
1
vote
1answer
231 views

API Authentication for Craft CMS

I'm building a system which should have two parts CMS using craft cms 2.6.x. and Yii2 for logical modules and administration. I want to login to CMS directly once the user has logged into yii2 system. ...
2
votes
1answer
672 views

How to use LDAP for authentication in Craft CP (back end)

Where only users in Active Directory can login to the Craft Control Panel.
3
votes
1answer
360 views

Can Auth0 be used for Craft Commerce user accounts?

I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
1
vote
1answer
367 views

Craft CMS Backing React FE using the element API

I am hoping to create a React Site that uses Craft CMS and the Element API as a backend. However, I know I will need to authenticate users and be posting data back into Craft which I believe the ...
2
votes
1answer
132 views

Using ADLDAP plugin in Craft 2.6 - can't bind to LDAP

I'm working with the ADLDAP plugin in order to provide frontend authentication against my organizations Active Directory. The problem is that I continually receive the message "Can't bind to LDAP ...
1
vote
1answer
42 views

Authorization fail

I am trying to being authorized at Chanel Adviser but it's showing error, "invalid_client". I am invoking this URL : https://api.channeladvisor.com/oauth2/token?client_id=...
1
vote
0answers
33 views

Give Access to Freeform (Solspace) Submission Answers to a tierce person

I implemented a form on a website using the Freeform Plugin (by Solspace) and I would like another company to have access to the results of this form. I am thinking of using the bootstrap demo to ...
2
votes
2answers
2k views

Connecting to REST API using Basic Auth

The title pretty much says it all. I'm trying to connect to a RESTful API within Craft templates to pull various showtimes, prices, availability, etc. of a theater. I have my URL endpoints and ...
1
vote
2answers
90 views

Authentication by a custom field

I added a field called "phonenumber" to the user profile fields which I want to use for login purposes, too. Usually Craft allows an authentication by username or email-address. Is there a way to add ...
3
votes
2answers
1k views

How to use the Element API plugin only when logged in?

I want to use the Element API plugin, but the content must only be visible when users are logged in. How I do this for a section? Is it possible to use requirelogin or currentUser for this?
2
votes
1answer
254 views

Implementing two factor authentication / TOTP for CP logins

We have a client with fairly extensive security requirements. They have asked us if it is feasible to implement something like Authy in Craft. I'm provisionally planning to disable the "normal" CP ...
2
votes
1answer
165 views

Does Craft Commerce support One Time Password and Social Login features?

I have just started reviewing this plugin for e-commerce development. Fully featured though it is, I wanted to know if Craft Commerce can also support custom auth (login and registration) features ...
3
votes
2answers
672 views

Restricted front-end access

As per the flow diagram below I want to restrict access for users outside my network. However rather then completely stopping external access I want them to be redirected to a login page where they ...
3
votes
1answer
481 views

Mobile app authentication

We're trying to use Craft as a CMS for a mobile app and to accomplish this we need to convert entries to JSON. We use the Element API plugin for this and it works like a charm. The problem is that ...
0
votes
1answer
338 views

Complete user profile after social public registration

I use Dukt plugins (-oauth and -social) for public front-end registration. I would like complete user profile after registration (e.g. license agreement checkbox). How is it possible to accomplish ...
5
votes
1answer
475 views

How to allow guest to make entry without login

I have a pretty simple form. I just realized that it doesn't work unless I'm logged in as admin. Is there a way to bypass that, or to simply turn off authentication altogether for Craft CMS? For this ...
3
votes
2answers
682 views

$allowAnonymous = true - not working

I want to be able to access a plugin page without having to login (for a cron job). I have added this to the plugin's controller: protected $allowAnonymous = true; However, this url still requires ...
1
vote
1answer
123 views

Can we log both access & content changes?

If we implement CraftCMS, we would need logging of both access and publishing (both successful and failed attempts). The ability to change/remove those logs should not be available to those using the ...
1
vote
1answer
88 views

How can I restrict access to the Control Panel to a single port?

Is it possible to limit access to the Control Panel to a specific HTTP port, which is shielded from public access? We want external visitors to only be able to access the front end site.
0
votes
1answer
111 views

Front end authentication on an entry and its related entries

I am looking to implement a website where access to pages and their related pages is restricted to certain users. How I thought it might work is that a user (or users) would be assigned to the entry. ...
1
vote
1answer
715 views

Craft admin login infinite redirect in cluster

We're having a problem logging in the Craft admin tool @ https://www.clearlabs.com/admin when we have more than one server in the cluster. After submitting credentials, Craft seems to keep 302-...
2
votes
1answer
330 views

Intercept all requests before a Controller Action is executed

Is there a way to intercept a request before a controller action is run, so that you could preform additional authorisation checks? Say I have an authorised user, but their access to actions is ...
1
vote
1answer
1k views

Custom Authentication

I'm in the process of developing a custom login for a website. Users will not be website users with logins, but rather will be authenticated via an email and a custom token. The process should be as ...
1
vote
1answer
104 views

Protect entry so that only a “relatedTo” user can see it

I would like to protect the viewing of an _entry.html page so that only a user related to that entry can view it.
4
votes
1answer
584 views

Craft as an API provider & authenticaton

I'm building an API provider using Craft and need to implement some kind of client authentication. I don't need to worry about individual users, but I'd like to require that clients authenticate in ...
1
vote
2answers
227 views

Just starting to evaluate - some basic questions [closed]

We are just in the CMS evaluation stage, so, I have some early questions: We don't want to create another layer of user logins, can Craft authenticate users using oauth or active directory? As Craft ...
1
vote
2answers
280 views

Cannot access plugin controllers when plugin does not have a “cp section”

Due to a permission check in \Craft\WebApp::processRequest(), I cannot access my plugin controller through the control panel templates. Also I cannot grant the user access because the plugin does not ...
1
vote
2answers
636 views

What is the correct way to use UserIdentity?

I am planning to create a micropub plugin so that any micropub client can post to craft, particularly useful for automatic data logging and mobile clients. But I am trying to work out the best way to ...