Discourse SSO with OAuth2

[arivanandan]

I’d like to set up SSO with github OAuth. When the user logs in to my site via github, it should also sign them in to discourse. Discourse comments are embedded on the site.

How do I go about this?

[david (David Taylor)]

For OAuth2 connection to your own site, you could use this plugin

Discourse OAuth2 Basic

Summary Discourse OAuth2 Basic supports basic OAuth2 providers, assuming they have a JSON API endpoint where user details can be retrieved by token. Repository Link https://github.com/discourse/discourse-oauth2-basic Install Guide How to install plugins in Discourse Features This plugin allows you to use a basic OAuth2 provider as authentication for Discourse. It should work with many providers, with the caveat that they must prov…

“Login with GitHub” is built-in to discourse, and you can find setup instructions here:

Configure GitHub login for Discourse

Go to https://github.com/settings/developers, then look for OAuth Apps in the left menu. Select New OAuth App. Fill in the required fields. [image] Be sure to set the Callback URL to use the path /auth/github/callback at your site domain. e.g., https://discuss.example.com/auth/github/callback (Optional) Upload a logo that users will see when signing into GitHub from your site. After creating your application, you should see the Client ID and Client Secret. Enter those in the Discourse…

[arivanandan]

I’m still confused.

In case it wasn’t clear, I have

Website with Github OAuth.
Discourse with Github OAuth.

Neither of them have any other login methods.
When a user logs in to my website, they should be logged into discourse as well.

What I’m missing is the link between them. How do I log them into discourse when they authenticate via Github OAuth on my website?

[itsbhanusharma (Bhanu Sharma)]

When someone logs into Your website, the only talking that happens is in between GitHub and your website.

I.e.
Your website calls github to ask if a user exists in their user database
Github responds yes (or no) and returns user data or authentication token as requested by your site.
Now, the user gets logged in to your site.

There is no play of discourse here in the equation. What you need here is some way to tell discourse that the given user has just logged in and needs to be logged into discourse as well.

What You need is a way to enqueue discourse login along with your website login so that discourse knows when a user has logged in/out.

Auth0 does this pretty well out of the box…
Another way is to use discourse as your SSO server.

[arivanandan]

Thanks for the replies!

I figured the auth plugin I use actually runs though OAuth and gives a JWT. The discourse-jwt thing should work for me I think.