I’m not sure if this is an implementation error on my side or if this is a bug in the SSO implementation of Discourse. Users having a plus-extension in the local part of their e-mail address got an error since Discourse interpretes the plus sign as space. Following Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) I must not urlencode the payload before encoding it to base64. Here my basic implementation, written in php: $email = 'user+extension@example.com'; $payload = base64_encode($nonce. "&email={$email}&external_id={$external_id}&username={$realname}&name={$realname}"); $return_sig = hash_hmac('sha256', $payload, $token); header("Location: $referer/session/sso_login?sso=". rawurlencode($payload) ."&sig=". $return_sig); Discourse throws the error: “Nonce has already expired” and writes down the e-mail address as “user extension@example.com” with a space instead of a plus sign.

[image] thabbs: base64_encode($nonce. You need "nonce=" . $nonce. there…

This is already there and was not the reason for my request. ( $nonce = base64_decode($sso); # starts with nonce=... )

A little late, I know. But in case anyone else runs into this problem. [image] thabbs: Following Official Single-Sign-On for Discourse (sso) I must not urlencode the payload before encoding it to base64 In fact we should urlencode the payload before base64 encoding. Our wordpress plugin and our ruby implementation both use library functions to build the payload, which automatically takes care of the encoding. I updated the docs to make it more explicit: [image]Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) Create a new url-encoded payload

SSO and e-mail addresses having a plus sign

Product Support

sam (Sam Saffron) October 2, 2018, 1:30am 2

You need "nonce=" . $nonce. there…

Topic		Replies	Views
Registration email address special characters Product Support	2	536	August 16, 2021
Watch out for double url encoding of SSO payload SSO	0	1596	July 28, 2019
Server-side sync_sso rejects valid payloads with 422 "Login Error" when the base64 contains a `+` (triggered by `~` in synced fields) Bug sso , fixed	2	175	July 27, 2026
Implementing SSO, nonce immediately expires Product Support	2	2170	October 2, 2019
SSO - "There is a problem with your account. Please contact the site's administrator." SSO	16	4999	March 18, 2019

SSO and e-mail addresses having a plus sign

Related topics