I’m the admin of a Discourse forum which mainly for China Mainland users, so our the governing law(网络安全法, 互联网跟帖评论服务管理规定 and 互联网论坛社区服务管理规定) required we must use real-name system. That means we must force users link phone number. I tried to use Alipay’s API to get user’s phone number, but only their Mini Apps / Programs’ developers can get users’ phone number. The main problem is we must verify users filed phone number is their real phone number.

Can you use QQ’s implementation of OAuth2.0? OAuth2.0简介 — QQ互联WIKI QQ登录是QQ互联的一种接入方式，通过接入QQ登录，用户可以使用QQ账号直接登录接入的站点，QQ登录同时提供API授权，帮助网站主将用户操作同步到QQ空间和朋友网； [image] Discourse OAuth2 Basic Plugin discourse2 Summary Discourse OAuth2 Basic supports basic OAuth2 providers, assuming they have a JSON API endpoint where user details can be retrieved by token. open_book Install Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Features This plugin allows you to use a basic OAuth2 provider as authentication for Discourse. It should work with many providers, with the caveat that they must provide a JSON endpoint for retri…

You can create a custom user field asking for a registering user’s phone number and make the field required.

[image] nexo: You can create a custom user field asking for a registering user’s phone number and make the field required. [image] Lee533: The main problem is we must verify users filed phone number is their real phone number. The emphasis is on verify.

I think the Facebook Account Kit is a good option for this. I don’t think there’s a discourse plugin for it tough.

[image] lucasbasquerotto: I think the Facebook Account Kit is a good option for this. I don’t think there’s a discourse plugin for it tough. Is there any good video tutorial for this? Can you guide me to one? For this to use, do I need to install oAuth 2 plugin?

I haven’t implemented it for discourse, so I don’t know exactly how to create a plugin for that, but in my implementation: 1) I already had an application in the Facebook for developers site (if you don’t have, just create one) and then just added the Account Kit product there. 2) Then I loaded the Account Kit script in the front-end: AccountKit_OnInteractive = function() { AccountKit.init({ appId: '{{ FACEBOOK_APP_ID }}', state: '{{ CSRF_TOKEN }}', version: 'v1.1', fbAppEventsEnabled: true, }); }; (in a first moment, when developing, you can put anything in the csrf token to make the flow work first, then you may return here and handle the csrf token) 3) In a button press event from the user I call the javascript SDK: AccountKit.login( 'PHONE', {countryCode: countryCode, phoneNumber: phoneNumber}, // will use default values if not specified loginCallback ); 4) The loginCallback function calls my backend api in case of success, or shows an error otherwise: function loginCallback(response) { if (response.status === "PARTIALLY_AUTHENTICATED") { var code = response.code; var csrf = response.state; callbackSuccess(code, csrf); } else if (response.status === "NOT_AUTHENTICATED") { callbackError("NOT_AUTHENTICATED"); } else if (response.status === "BAD_PARAMS") { callbackError("BAD_PARAMS"); } } 5) Then in the backend I call the Account Kit endpoint https://graph.accountkit.com/v1.1/access_token passing the code to retrieve the access token, and then I call https://graph.accountkit.com/v1.1/me passing the access token to retrieve the phone number (phone.number), but first I make sure that it was called using my application Id (created in the 1st step). Click to see the java code that I use (for reference) public static String retrievePhoneData(String code) throws HTTPException, NotAllowedException { String appAccessToken = Arrays.asList( "AA", FACEBOOK_APP_ID, ACCOUNT_KIT_APP_SECRET ).stream().collect(Collectors.joining("|")); Map params = new HashMap<>(); params.put("grant_type", "authorization_code"); params.put("code", code); params.put("access_token", appAccessToken); SimpleHttpClientRequest requestToken = new SimpleHttpClientRequest(); requestToken.setMethod(HTTPMethod.GET); requestToken.setUrl(TOKEN_EXCHANGE_BASE_URL); requestToken.setParametros(params); SimpleHttpClientResponse responseToken = URIUtils.getResponseObjectFromRequest(requestToken); int statusCodeToken = responseToken.getStatusCode(); if ((statusCodeToken 299)) { throw new HTTPException(requestToken, responseToken); } String responseStrToken = responseToken.getResponse(); Mapper mapperToken = StringUtil.getMapperFromJSON(responseStrToken); String accessToken = mapperToken.getAsString("access_token"); SimpleHttpClientRequest requestMain = new SimpleHttpClientRequest(); requestMain.setMethod(HTTPMethod.GET); requestMain.setUrl(ME_ENDPOINT_BASE_URL + "?access_token=" + accessToken); SimpleHttpClientResponse responseMain = URIUtils.getResponseObjectFromRequest(requestMain); int statusCodeMain = responseMain.getStatusCode(); if ((statusCodeMain 299)) { throw new HTTPException(requestMain, responseMain); } String responseStrMain = responseMain.getResponse(); Mapper mapperMain = StringUtil.getMapperFromJSON(responseStrMain); String appId = mapperMain.getAsString("application.id"); if (!FACEBOOK_APP_ID.equals(appId)) { throw new NotAllowedException(); } String phoneNumber = mapperMain.getAsString("phone.number"); return phoneNumber; } I haven’t seen any videos, just followed the steps that is explained here: https://developers.facebook.com/docs/accountkit/webjs (the main change was that it’s in nodejs, and I used java, but it was pretty straightforward, after all it’s just api calls in the backend) [image] BobbyZopfan: For this to use, do I need to install oAuth 2 plugin? If you use the javascript flow (including the script that loads the sdk and so on), I don’t think so. But like I said, I haven’t implemented it in a Discourse site, so I don’t know the exact requirements to create a plugin that supports Account Kit.

Problem is in the very first step. When, after creating our app in the FB developer console, we have to choose components/functions for our app, where we are supposed to find FB Account Kit, there FB Account Kit is no longer there to be found. [image] Even clicking on + button besides ‘products’ link, takes us to ‘Dashboard’ screen (as shown in the SS).

I entered my app now and saw that behaviour. To me it seems like a bug on their end. Or you can add the products in another, well hidden place :S

How to force users link phone number when they using Discourse?

Product Support

Lee533 (· Lee) March 27, 2019, 10:55am 4

OAuth 2.0 just can allow users Sign In with their QQ account, it can’t get user’s real phone number.

Topic		Replies	Views
Possible to ask for phone number when signing up for Discourse? Product Support	2	544	July 7, 2020
Discourse OAuth2 Basic Plugin official , oauth2 , auth-plugins , included-in-core	30	68321	July 24, 2025
Can we login Discourse by Accountkit.com? Feature	5	678	August 20, 2018
How to allow login of user through mobile number? Feature	83	18891	December 2, 2020
How to use Oauth2 service provided by discourse? SSO oauth2	1	1993	June 15, 2020

How to force users link phone number when they using Discourse?

Related topics