We use Discourse as our community site and we have a we have an official web site . So, we hope that discourse can be automatically logged on after user logged on our official website . Our official website will add a cookie when user loggin and we use cookie sharing in discourse . Discourse g…

This is insecure. A user could tamper with the cookie in their browser and log in as someone else. You should use DiscourseConnect instead.

Thanks for your suggestion. I am a newbie for Discourse . If i use DiscourseConnect instead it , should I have an web api to return a nonce that DiscourseConnect needs？

쿠키 토큰으로 Discourse 로그인

지원 SSO

michaeld (Michael - Communiteq) 5월 22, 2022, 4:04오후 2

이것은 안전하지 않습니다. 사용자가 브라우저에서 쿠키를 변조하여 다른 사람으로 로그인할 수 있습니다.

대신 DiscourseConnect를 사용해야 합니다.

글		댓글	조회수
Cookie Based Authentication in discourse via Plugin SSO	6	2280	9월 5, 2018
What to do with response from Discourse SSO as provider SSO	4	2220	11월 16, 2018
Login user automatically from my website to discourse SSO	0	129	8월 17, 2024
Issues using SSO in custom web app Development	10	1559	1월 9, 2018
Discourse login from external site SSO	0	1004	1월 10, 2023

쿠키 토큰으로 Discourse 로그인

Related topics