Questions tagged [authentication]
The authentication tag has no usage guidance.
38
questions
0
votes
0answers
10 views
Check Laravel auth status from Craft
I'm working on a Laravel/Craft integration project, where I have to check if a user is authenticated on a Laravel app running on the same site. So far, I've managed to load Laravel inside a plugin ...
0
votes
0answers
24 views
Does the authenticate method in the User class work?
This doesn't work:
$user = User::find()->email("bob@example.com")->one();
if ($user->authenticate("myClearTextPassword")) {
// This is never true, so you never get here
}...
1
vote
0answers
41 views
Instructions for external or integrating auth?
I'm looking to either use my own auth or use Craft's for additional functionality outside of Craft. Our client has some very specific requirements that we'll be building separately and we'd like to ...
0
votes
1answer
148 views
How to override UserController.actionLogin or the login form template in Craft 3?
Hi I'm trying to build a custom authentication plugin for an organization, and I'm having a hard time figuring out how to override the craft\controllers\UserController.actionLogin method. I tried ...
2
votes
0answers
363 views
How to authenticate as a Craft user with a frontend tool like Next.js, Nuxt.js, or create-react-app?
We're looking to use Craft CMS as an application platform (handling content storage, user authentication, etc) for an upcoming project while leveraging something like Next.js on the front-end.
Here's ...
2
votes
0answers
197 views
User Event before Login - check if user has password and logged in before
Is there a User Event before the authentication is fired?
I want to show a message if the user doesn't have a password yet and if it's his first login / check if he never logged in before - All in ...
0
votes
0answers
96 views
Logging into CP doesn't set authentication cookie
Trying to debug an issue where in a dev environment logging into the cp it doesn't set the CP Authentication Cookie (the hash with the _identity) at the end of it. I believe this is the root cause of ...
2
votes
1answer
170 views
Logging in to Craft via Vue/Javascript apps
I'm just diving into the world of javascript frameworks (late to the party I know) and can't figure out the missing piece of the authentication puzzle.
What is the preferred way to authenticate users ...
1
vote
2answers
213 views
Craft CMS module composer dependancy
After some research surrounding this I can't seem to fix this issue. So for a project I made a simple module with some variables that simply has to make an OAuth1 call and return some data.
The ...
2
votes
1answer
1k views
Craft 3 Element API Authentication/Login
First things first: This is quite similar to this, yet different.
I'm trying to get authentication/login for Element-API for Craft 3 to work. Meaning I would like to restrict access to certain ...
1
vote
1answer
271 views
API Authentication for Craft CMS
I'm building a system which should have two parts CMS using craft cms 2.6.x. and Yii2 for logical modules and administration. I want to login to CMS directly once the user has logged into yii2 system. ...
2
votes
1answer
839 views
How to use LDAP for authentication in Craft CP (back end)
Where only users in Active Directory can login to the Craft Control Panel.
3
votes
1answer
428 views
Can Auth0 be used for Craft Commerce user accounts?
I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
1
vote
1answer
385 views
Craft CMS Backing React FE using the element API
I am hoping to create a React Site that uses Craft CMS and the Element API as a backend. However, I know I will need to authenticate users and be posting data back into Craft which I believe the ...
2
votes
1answer
143 views
Using ADLDAP plugin in Craft 2.6 - can't bind to LDAP
I'm working with the ADLDAP plugin in order to provide frontend authentication against my organizations Active Directory. The problem is that I continually receive the message "Can't bind to LDAP ...
1
vote
1answer
48 views
Authorization fail
I am trying to being authorized at Chanel Adviser but it's showing error, "invalid_client".
I am invoking this URL :
https://api.channeladvisor.com/oauth2/token?client_id=...
1
vote
0answers
33 views
Give Access to Freeform (Solspace) Submission Answers to a tierce person
I implemented a form on a website using the Freeform Plugin (by Solspace) and I would like another company to have access to the results of this form.
I am thinking of using the bootstrap demo to ...
2
votes
2answers
2k views
Connecting to REST API using Basic Auth
The title pretty much says it all.
I'm trying to connect to a RESTful API within Craft templates to pull various showtimes, prices, availability, etc. of a theater. I have my URL endpoints and ...
1
vote
2answers
99 views
Authentication by a custom field
I added a field called "phonenumber" to the user profile fields which I want to use for login purposes, too.
Usually Craft allows an authentication by username or email-address. Is there a way to add ...
3
votes
2answers
2k views
How to use the Element API plugin only when logged in?
I want to use the Element API plugin, but the content must only be visible when users are logged in. How I do this for a section? Is it possible to use requirelogin or currentUser for this?
2
votes
1answer
288 views
Implementing two factor authentication / TOTP for CP logins
We have a client with fairly extensive security requirements. They have asked us if it is feasible to implement something like Authy in Craft.
I'm provisionally planning to disable the "normal" CP ...
2
votes
1answer
169 views
Does Craft Commerce support One Time Password and Social Login features?
I have just started reviewing this plugin for e-commerce development. Fully featured though it is, I wanted to know if Craft Commerce can also support custom auth (login and registration) features ...
3
votes
2answers
767 views
Restricted front-end access
As per the flow diagram below I want to restrict access for users outside my network. However rather then completely stopping external access I want them to be redirected to a login page where they ...
3
votes
1answer
544 views
Mobile app authentication
We're trying to use Craft as a CMS for a mobile app and to accomplish this we need to convert entries to JSON. We use the Element API plugin for this and it works like a charm.
The problem is that ...
0
votes
1answer
346 views
Complete user profile after social public registration
I use Dukt plugins (-oauth and -social) for public front-end registration. I would like complete user profile after registration (e.g. license agreement checkbox).
How is it possible to accomplish ...
5
votes
1answer
502 views
How to allow guest to make entry without login
I have a pretty simple form. I just realized that it doesn't work unless I'm logged in as admin.
Is there a way to bypass that, or to simply turn off authentication altogether for Craft CMS? For this ...
3
votes
2answers
753 views
$allowAnonymous = true - not working
I want to be able to access a plugin page without having to login (for a cron job).
I have added this to the plugin's controller:
protected $allowAnonymous = true;
However, this url still requires ...
1
vote
1answer
129 views
Can we log both access & content changes?
If we implement CraftCMS, we would need logging of both access and publishing (both successful and failed attempts). The ability to change/remove those logs should not be available to those using the ...
1
vote
1answer
92 views
How can I restrict access to the Control Panel to a single port?
Is it possible to limit access to the Control Panel to a specific HTTP port, which is shielded from public access? We want external visitors to only be able to access the front end site.
0
votes
1answer
114 views
Front end authentication on an entry and its related entries
I am looking to implement a website where access to pages and their related pages is restricted to certain users.
How I thought it might work is that a user (or users) would be assigned to the entry. ...
1
vote
1answer
777 views
Craft admin login infinite redirect in cluster
We're having a problem logging in the Craft admin tool @ https://www.clearlabs.com/admin when we have more than one server in the cluster.
After submitting credentials, Craft seems to keep 302-...
2
votes
1answer
395 views
Intercept all requests before a Controller Action is executed
Is there a way to intercept a request before a controller action is run, so that you could preform additional authorisation checks?
Say I have an authorised user, but their access to actions is ...
1
vote
1answer
1k views
Custom Authentication
I'm in the process of developing a custom login for a website. Users will not be website users with logins, but rather will be authenticated via an email and a custom token. The process should be as ...
1
vote
1answer
104 views
Protect entry so that only a “relatedTo” user can see it
I would like to protect the viewing of an _entry.html page so that only a user related to that entry can view it.
4
votes
1answer
604 views
Craft as an API provider & authenticaton
I'm building an API provider using Craft and need to implement some kind of client authentication. I don't need to worry about individual users, but I'd like to require that clients authenticate in ...
1
vote
2answers
230 views
Just starting to evaluate - some basic questions [closed]
We are just in the CMS evaluation stage, so, I have some early questions:
We don't want to create another layer of user logins, can Craft authenticate users using oauth or active directory?
As Craft ...
1
vote
2answers
284 views
Cannot access plugin controllers when plugin does not have a “cp section”
Due to a permission check in \Craft\WebApp::processRequest(), I cannot access my plugin controller through the control panel templates. Also I cannot grant the user access because the plugin does not ...
1
vote
2answers
661 views
What is the correct way to use UserIdentity?
I am planning to create a micropub plugin so that any micropub client can post to craft, particularly useful for automatic data logging and mobile clients. But I am trying to work out the best way to ...
