Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
35 views

Frontend Authentication with GraphQl on different domain

I want to build a headless craft-cms site. Frontend is on mydomain.com, backend on login.mydomain.com However, i want users to login in the frontend and create a session there. Only logged in users ...
Juice's user avatar
  • 1
1 vote
1 answer
142 views

How to Sign In/Up using social accounts ( Google, Facebook, Apple)?

I'm trying to let users sign in/up using different social account providers like ( Google, Facebook, Apple). How can I manage to do that without using the (social plugin)? Are there any tutorials(...
Ra3d K's user avatar
  • 125
1 vote
0 answers
52 views

Does the authenticate method in the User class work?

This doesn't work: $user = User::find()->email("[email protected]")->one(); if ($user->authenticate("myClearTextPassword")) { // This is never true, so you never get here }...
David Jones's user avatar
1 vote
0 answers
62 views

Instructions for external or integrating auth?

I'm looking to either use my own auth or use Craft's for additional functionality outside of Craft. Our client has some very specific requirements that we'll be building separately and we'd like to ...
Darryl Hein's user avatar
0 votes
1 answer
365 views

How to override UserController.actionLogin or the login form template in Craft 3?

Hi I'm trying to build a custom authentication plugin for an organization, and I'm having a hard time figuring out how to override the craft\controllers\UserController.actionLogin method. I tried ...
Myles Hyson's user avatar
2 votes
0 answers
545 views

How to authenticate as a Craft user with a frontend tool like Next.js, Nuxt.js, or create-react-app?

We're looking to use Craft CMS as an application platform (handling content storage, user authentication, etc) for an upcoming project while leveraging something like Next.js on the front-end. Here's ...
Aaron Bushnell's user avatar
4 votes
0 answers
434 views

User Event before Login - check if user has password and logged in before

Is there a User Event before the authentication is fired? I want to show a message if the user doesn't have a password yet and if it's his first login / check if he never logged in before - All in ...
Christopher Dosin's user avatar
0 votes
0 answers
213 views

Logging into CP doesn't set authentication cookie

Trying to debug an issue where in a dev environment logging into the cp it doesn't set the CP Authentication Cookie (the hash with the _identity) at the end of it. I believe this is the root cause of ...
zhua89's user avatar
  • 31
2 votes
1 answer
287 views

Logging in to Craft via Vue/Javascript apps

I'm just diving into the world of javascript frameworks (late to the party I know) and can't figure out the missing piece of the authentication puzzle. What is the preferred way to authenticate users ...
dmatthams's user avatar
  • 2,492
1 vote
2 answers
298 views

Craft CMS module composer dependancy

After some research surrounding this I can't seem to fix this issue. So for a project I made a simple module with some variables that simply has to make an OAuth1 call and return some data. The ...
Stef Dg's user avatar
  • 43
2 votes
1 answer
2k views

Craft 3 Element API Authentication/Login

First things first: This is quite similar to this, yet different. I'm trying to get authentication/login for Element-API for Craft 3 to work. Meaning I would like to restrict access to certain ...
Eternal Black's user avatar
1 vote
1 answer
412 views

API Authentication for Craft CMS

I'm building a system which should have two parts CMS using craft cms 2.6.x. and Yii2 for logical modules and administration. I want to login to CMS directly once the user has logged into yii2 system. ...
Deena Samy's user avatar
3 votes
1 answer
1k views

How to use LDAP for authentication in Craft CP (back end)

Where only users in Active Directory can login to the Craft Control Panel.
youme's user avatar
  • 41
3 votes
1 answer
597 views

Can Auth0 be used for Craft Commerce user accounts?

I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
Bo Bartlett's user avatar
1 vote
1 answer
440 views

Craft CMS Backing React FE using the element API

I am hoping to create a React Site that uses Craft CMS and the Element API as a backend. However, I know I will need to authenticate users and be posting data back into Craft which I believe the ...
9er's user avatar
  • 179
2 votes
1 answer
175 views

Using ADLDAP plugin in Craft 2.6 - can't bind to LDAP

I'm working with the ADLDAP plugin in order to provide frontend authentication against my organizations Active Directory. The problem is that I continually receive the message "Can't bind to LDAP ...
buck1112's user avatar
  • 400
1 vote
1 answer
70 views

Authorization fail

I am trying to being authorized at Chanel Adviser but it's showing error, "invalid_client". I am invoking this URL : https://api.channeladvisor.com/oauth2/token?client_id=...
kazi's user avatar
  • 11
1 vote
0 answers
36 views

Give Access to Freeform (Solspace) Submission Answers to a tierce person

I implemented a form on a website using the Freeform Plugin (by Solspace) and I would like another company to have access to the results of this form. I am thinking of using the bootstrap demo to ...
Lisonc's user avatar
  • 23
2 votes
2 answers
2k views

Connecting to REST API using Basic Auth

The title pretty much says it all. I'm trying to connect to a RESTful API within Craft templates to pull various showtimes, prices, availability, etc. of a theater. I have my URL endpoints and ...
Jeff Glenn's user avatar
1 vote
2 answers
118 views

Authentication by a custom field

I added a field called "phonenumber" to the user profile fields which I want to use for login purposes, too. Usually Craft allows an authentication by username or email-address. Is there a way to add ...
Marco's user avatar
  • 213
3 votes
2 answers
2k views

How to use the Element API plugin only when logged in?

I want to use the Element API plugin, but the content must only be visible when users are logged in. How I do this for a section? Is it possible to use requirelogin or currentUser for this?
Maarten Heideman's user avatar
3 votes
1 answer
394 views

Implementing two factor authentication / TOTP for CP logins

We have a client with fairly extensive security requirements. They have asked us if it is feasible to implement something like Authy in Craft. I'm provisionally planning to disable the "normal" CP ...
Tom Davies's user avatar
2 votes
1 answer
178 views

Does Craft Commerce support One Time Password and Social Login features?

I have just started reviewing this plugin for e-commerce development. Fully featured though it is, I wanted to know if Craft Commerce can also support custom auth (login and registration) features ...
Amit Erandole's user avatar
3 votes
2 answers
852 views

Restricted front-end access

As per the flow diagram below I want to restrict access for users outside my network. However rather then completely stopping external access I want them to be redirected to a login page where they ...
luke mclean's user avatar
4 votes
1 answer
617 views

Mobile app authentication

We're trying to use Craft as a CMS for a mobile app and to accomplish this we need to convert entries to JSON. We use the Element API plugin for this and it works like a charm. The problem is that ...
Joris's user avatar
  • 130
0 votes
1 answer
366 views

Complete user profile after social public registration

I use Dukt plugins (-oauth and -social) for public front-end registration. I would like complete user profile after registration (e.g. license agreement checkbox). How is it possible to accomplish ...
Giorgio Lasala's user avatar
6 votes
1 answer
612 views

How to allow guest to make entry without login

I have a pretty simple form. I just realized that it doesn't work unless I'm logged in as admin. Is there a way to bypass that, or to simply turn off authentication altogether for Craft CMS? For this ...
cheechaw's user avatar
  • 101
3 votes
2 answers
1k views

$allowAnonymous = true - not working

I want to be able to access a plugin page without having to login (for a cron job). I have added this to the plugin's controller: protected $allowAnonymous = true; However, this url still requires ...
Adam Fairbanks's user avatar
1 vote
1 answer
194 views

Can we log both access & content changes?

If we implement CraftCMS, we would need logging of both access and publishing (both successful and failed attempts). The ability to change/remove those logs should not be available to those using the ...
Steven's user avatar
  • 133
1 vote
1 answer
107 views

How can I restrict access to the Control Panel to a single port?

Is it possible to limit access to the Control Panel to a specific HTTP port, which is shielded from public access? We want external visitors to only be able to access the front end site.
Steven's user avatar
  • 133
0 votes
1 answer
115 views

Front end authentication on an entry and its related entries

I am looking to implement a website where access to pages and their related pages is restricted to certain users. How I thought it might work is that a user (or users) would be assigned to the entry. ...
Kyle's user avatar
  • 65
1 vote
1 answer
929 views

Craft admin login infinite redirect in cluster

We're having a problem logging in the Craft admin tool @ https://www.clearlabs.com/admin when we have more than one server in the cluster. After submitting credentials, Craft seems to keep 302-...
TheArchitect's user avatar
2 votes
1 answer
530 views

Intercept all requests before a Controller Action is executed

Is there a way to intercept a request before a controller action is run, so that you could preform additional authorisation checks? Say I have an authorised user, but their access to actions is ...
PanPipes's user avatar
  • 123
1 vote
1 answer
1k views

Custom Authentication

I'm in the process of developing a custom login for a website. Users will not be website users with logins, but rather will be authenticated via an email and a custom token. The process should be as ...
Kyle's user avatar
  • 13
1 vote
1 answer
106 views

Protect entry so that only a "relatedTo" user can see it

I would like to protect the viewing of an _entry.html page so that only a user related to that entry can view it.
GlennJ's user avatar
  • 575
4 votes
1 answer
690 views

Craft as an API provider & authenticaton

I'm building an API provider using Craft and need to implement some kind of client authentication. I don't need to worry about individual users, but I'd like to require that clients authenticate in ...
kestonh's user avatar
  • 63
1 vote
2 answers
232 views

Just starting to evaluate - some basic questions [closed]

We are just in the CMS evaluation stage, so, I have some early questions: We don't want to create another layer of user logins, can Craft authenticate users using oauth or active directory? As Craft ...
Chip Shank's user avatar
1 vote
2 answers
347 views

Cannot access plugin controllers when plugin does not have a "cp section"

Due to a permission check in \Craft\WebApp::processRequest(), I cannot access my plugin controller through the control panel templates. Also I cannot grant the user access because the plugin does not ...
Raymond Schouten's user avatar
1 vote
2 answers
731 views

What is the correct way to use UserIdentity?

I am planning to create a micropub plugin so that any micropub client can post to craft, particularly useful for automatic data logging and mobile clients. But I am trying to work out the best way to ...
Shane Hudson's user avatar