After this, I’ve been able to get SSO up and running with JWT. With the discourse-omniauth-jwt library, I’m not sure how to redirect people after sign-in. When a user logs into my site, I obtain the JWT and sign them into discourse as well immediately. At the end of this flow, they end up at the discourse site instead of back at my site. I have tried checking out the omniauth library’s redirection methods which includes the origin param and the destination_url cookie from here. None of them seem to work. Maybe @eviltrout can shed some light on this. EDIT: Just realized I’ve been looking at two different libraries, omniauth and discourse’s omniauth callbacks. Anyway, still unsure how to make this work.

So the issue here is: a user logs into your site you redirect them to discourse to log in there they end up logged in at discourse? I don’t think this is a supported path. In general, a user would be on discourse, click login, visit your site for auth and be redirected back. If a user logs in directly on your site, they should stay on your site. Typically how we do this is keep Discourse logged out, but when they click “Login” it’ll redirect back without having to fill out the authentication form again.

So, the embeds do make use of the auth session (or the session cookie) to show or hide private discourse topics. This auth flow does make sense, but for starters, I’m going to redirect people to the discourse forum for login on a new tab. They will be able to access private topics after a refresh.

Omniauth jwt redirect

Product Support SSO

arivanandan (Arivanandan) December 31, 2019, 10:34am 3

Hmm right makes sense. Logging in doesn’t do much now that I think about it since the embed can’t make use of the auth session.

Topic		Replies	Views
Discourse doesn't redirect to return_sso_url after user logs in on private site Product Support	4	4299	October 4, 2018
Discourse redirects to the OAuth server after loading `/?authComplete=true` SSO	5	2093	May 17, 2019
Discourse doesn’t redirect to return_sso_url after user logs in on private site SSO	0	547	June 3, 2022
Redirect after login one like logout redirect Feature	6	6459	January 10, 2015
Redirect user to new-topic after oauth login Feature oauth2	1	355	January 2, 2024

Omniauth jwt redirect

Related topics