Questions tagged [authentication]
The authentication tag has no usage guidance.
42
questions
0
votes
0
answers
26
views
Can we use Auth0 for SSO but users are from Craft CMS database?
I have membership/users running in my Craft CMS website and I have quite a lot of users saved there. Now, I want to build an SSO provider to integrate it in the 3rd Party application called "...
1
vote
1
answer
44
views
How to Sign In/Up using social accounts ( Google, Facebook, Apple)?
I'm trying to let users sign in/up using different social account providers like ( Google, Facebook, Apple).
How can I manage to do that without using the (social plugin)?
Are there any tutorials(...
- 115
0
votes
0
answers
48
views
Bearer Authorization not working Safari
I'm using craft 3.7.16 as headless and retrieving the data through GraphQL.
I've identified that Safari is not working when we have a bearer authorization. It seems that it changes the bearer to basic ...
0
votes
0
answers
19
views
OAuth Client library query
We are looking into extending the venveo/craft-oauthclient plugin to use the TheNetworg/oauth2-azure Provider.
However we need to set this up to authenticate via the client_credentials grant type as ...
- 1,721
0
votes
0
answers
14
views
Check Laravel auth status from Craft
I'm working on a Laravel/Craft integration project, where I have to check if a user is authenticated on a Laravel app running on the same site. So far, I've managed to load Laravel inside a plugin ...
- 386
1
vote
0
answers
35
views
Does the authenticate method in the User class work?
This doesn't work:
$user = User::find()->email("bob@example.com")->one();
if ($user->authenticate("myClearTextPassword")) {
// This is never true, so you never get here
}...
- 321
1
vote
0
answers
45
views
Instructions for external or integrating auth?
I'm looking to either use my own auth or use Craft's for additional functionality outside of Craft. Our client has some very specific requirements that we'll be building separately and we'd like to ...
- 131
0
votes
1
answer
238
views
How to override UserController.actionLogin or the login form template in Craft 3?
Hi I'm trying to build a custom authentication plugin for an organization, and I'm having a hard time figuring out how to override the craft\controllers\UserController.actionLogin method. I tried ...
- 63
2
votes
0
answers
450
views
How to authenticate as a Craft user with a frontend tool like Next.js, Nuxt.js, or create-react-app?
We're looking to use Craft CMS as an application platform (handling content storage, user authentication, etc) for an upcoming project while leveraging something like Next.js on the front-end.
Here's ...
- 485
4
votes
0
answers
313
views
User Event before Login - check if user has password and logged in before
Is there a User Event before the authentication is fired?
I want to show a message if the user doesn't have a password yet and if it's his first login / check if he never logged in before - All in ...
0
votes
0
answers
132
views
Logging into CP doesn't set authentication cookie
Trying to debug an issue where in a dev environment logging into the cp it doesn't set the CP Authentication Cookie (the hash with the _identity) at the end of it. I believe this is the root cause of ...
- 31
2
votes
1
answer
217
views
Logging in to Craft via Vue/Javascript apps
I'm just diving into the world of javascript frameworks (late to the party I know) and can't figure out the missing piece of the authentication puzzle.
What is the preferred way to authenticate users ...
- 2,437
1
vote
2
answers
256
views
Craft CMS module composer dependancy
After some research surrounding this I can't seem to fix this issue. So for a project I made a simple module with some variables that simply has to make an OAuth1 call and return some data.
The ...
- 43
2
votes
1
answer
2k
views
Craft 3 Element API Authentication/Login
First things first: This is quite similar to this, yet different.
I'm trying to get authentication/login for Element-API for Craft 3 to work. Meaning I would like to restrict access to certain ...
- 145
1
vote
1
answer
307
views
API Authentication for Craft CMS
I'm building a system which should have two parts CMS using craft cms 2.6.x. and Yii2 for logical modules and administration. I want to login to CMS directly once the user has logged into yii2 system. ...
- 111
2
votes
1
answer
943
views
How to use LDAP for authentication in Craft CP (back end)
Where only users in Active Directory can login to the Craft Control Panel.
- 31
3
votes
1
answer
511
views
Can Auth0 be used for Craft Commerce user accounts?
I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
- 41
1
vote
1
answer
413
views
Craft CMS Backing React FE using the element API
I am hoping to create a React Site that uses Craft CMS and the Element API as a backend. However, I know I will need to authenticate users and be posting data back into Craft which I believe the ...
- 179
2
votes
1
answer
161
views
Using ADLDAP plugin in Craft 2.6 - can't bind to LDAP
I'm working with the ADLDAP plugin in order to provide frontend authentication against my organizations Active Directory. The problem is that I continually receive the message "Can't bind to LDAP ...
- 368
1
vote
1
answer
60
views
Authorization fail
I am trying to being authorized at Chanel Adviser but it's showing error, "invalid_client".
I am invoking this URL :
https://api.channeladvisor.com/oauth2/token?client_id=...
- 11
1
vote
0
answers
35
views
Give Access to Freeform (Solspace) Submission Answers to a tierce person
I implemented a form on a website using the Freeform Plugin (by Solspace) and I would like another company to have access to the results of this form.
I am thinking of using the bootstrap demo to ...
- 23
2
votes
2
answers
2k
views
Connecting to REST API using Basic Auth
The title pretty much says it all.
I'm trying to connect to a RESTful API within Craft templates to pull various showtimes, prices, availability, etc. of a theater. I have my URL endpoints and ...
- 51
1
vote
2
answers
107
views
Authentication by a custom field
I added a field called "phonenumber" to the user profile fields which I want to use for login purposes, too.
Usually Craft allows an authentication by username or email-address. Is there a way to add ...
- 213
3
votes
2
answers
2k
views
How to use the Element API plugin only when logged in?
I want to use the Element API plugin, but the content must only be visible when users are logged in. How I do this for a section? Is it possible to use requirelogin or currentUser for this?
- 371
2
votes
1
answer
323
views
Implementing two factor authentication / TOTP for CP logins
We have a client with fairly extensive security requirements. They have asked us if it is feasible to implement something like Authy in Craft.
I'm provisionally planning to disable the "normal" CP ...
- 165
2
votes
1
answer
173
views
Does Craft Commerce support One Time Password and Social Login features?
I have just started reviewing this plugin for e-commerce development. Fully featured though it is, I wanted to know if Craft Commerce can also support custom auth (login and registration) features ...
- 338
3
votes
2
answers
810
views
Restricted front-end access
As per the flow diagram below I want to restrict access for users outside my network. However rather then completely stopping external access I want them to be redirected to a login page where they ...
- 131
4
votes
1
answer
579
views
Mobile app authentication
We're trying to use Craft as a CMS for a mobile app and to accomplish this we need to convert entries to JSON. We use the Element API plugin for this and it works like a charm.
The problem is that ...
- 130
0
votes
1
answer
358
views
Complete user profile after social public registration
I use Dukt plugins (-oauth and -social) for public front-end registration. I would like complete user profile after registration (e.g. license agreement checkbox).
How is it possible to accomplish ...
5
votes
1
answer
543
views
How to allow guest to make entry without login
I have a pretty simple form. I just realized that it doesn't work unless I'm logged in as admin.
Is there a way to bypass that, or to simply turn off authentication altogether for Craft CMS? For this ...
- 91
3
votes
2
answers
860
views
$allowAnonymous = true - not working
I want to be able to access a plugin page without having to login (for a cron job).
I have added this to the plugin's controller:
protected $allowAnonymous = true;
However, this url still requires ...
1
vote
1
answer
144
views
Can we log both access & content changes?
If we implement CraftCMS, we would need logging of both access and publishing (both successful and failed attempts). The ability to change/remove those logs should not be available to those using the ...
- 133
1
vote
1
answer
97
views
How can I restrict access to the Control Panel to a single port?
Is it possible to limit access to the Control Panel to a specific HTTP port, which is shielded from public access? We want external visitors to only be able to access the front end site.
- 133
0
votes
1
answer
114
views
Front end authentication on an entry and its related entries
I am looking to implement a website where access to pages and their related pages is restricted to certain users.
How I thought it might work is that a user (or users) would be assigned to the entry. ...
- 65
1
vote
1
answer
841
views
Craft admin login infinite redirect in cluster
We're having a problem logging in the Craft admin tool @ https://www.clearlabs.com/admin when we have more than one server in the cluster.
After submitting credentials, Craft seems to keep 302-...
- 113
2
votes
1
answer
446
views
Intercept all requests before a Controller Action is executed
Is there a way to intercept a request before a controller action is run, so that you could preform additional authorisation checks?
Say I have an authorised user, but their access to actions is ...
- 123
1
vote
1
answer
1k
views
Custom Authentication
I'm in the process of developing a custom login for a website. Users will not be website users with logins, but rather will be authenticated via an email and a custom token. The process should be as ...
- 13
1
vote
1
answer
106
views
Protect entry so that only a "relatedTo" user can see it
I would like to protect the viewing of an _entry.html page so that only a user related to that entry can view it.
- 575
4
votes
1
answer
642
views
Craft as an API provider & authenticaton
I'm building an API provider using Craft and need to implement some kind of client authentication. I don't need to worry about individual users, but I'd like to require that clients authenticate in ...
- 63
1
vote
2
answers
231
views
Just starting to evaluate - some basic questions [closed]
We are just in the CMS evaluation stage, so, I have some early questions:
We don't want to create another layer of user logins, can Craft authenticate users using oauth or active directory?
As Craft ...
- 183
1
vote
2
answers
302
views
Cannot access plugin controllers when plugin does not have a "cp section"
Due to a permission check in \Craft\WebApp::processRequest(), I cannot access my plugin controller through the control panel templates. Also I cannot grant the user access because the plugin does not ...
1
vote
2
answers
694
views
What is the correct way to use UserIdentity?
I am planning to create a micropub plugin so that any micropub client can post to craft, particularly useful for automatic data logging and mobile clients. But I am trying to work out the best way to ...
- 475