Discourse with SSO from Nextcloud

dev sso
#1

Couldn’t find a guide for this. But what I’d like to do is to “integrate” Discourse as an “app” inside the open source collaborative environment Nextcloud. I believe this is done by opening Discourse - kind of like an iframe - as an “external site” in Nextcloud. These are my steps:

  1. Notice there is some kind of “integration app” for using SSO between Nextcloud/Discourse:
    Discourse SSO - Apps - App Store - Nextcloud

  2. In Nextcloud, go to + Apps -> Integration -> Discourse SSO. Install this, and enable it.

    image
    image1898×1080 302 KB

  3. Go to my settings, and enter my SSO information:

    image
    image1898×1082 98.8 KB

  4. I go to my Discourse forum site (which is in Swedish, sorry), and go to my admin settings:

    image
    image1890×1010 344 KB

    And scroll down to fill out these 3 fields:
    image
    image1894×1024 362 KB

  5. I log out from both Discourse and Nextcloud. Log in to Nextcloud (using the same email at both Nextcloud and Discourse), but cannot successfully open the “external site” to reveal my Discourse forum.

    image
    image1356×648 7.88 KB

Why does Firefox interpret my forum as being embedded?

#2

Are you sure you’re using the correct endpoint for sso?

Second would be to see if CSP is causing this behaviour (I’m not sure how or why)

#3

I’ve tried disabling SSO, but the subdomain where my forum is located still cannot be opened within Nextcloud. My regular domain name does however open.
By CSP you mean the Cloud Service Provider where my Discourse is at?

#4

From Nextcloud

Your links may or may not work correctly due to the various ways that Web browsers and Web sites handle HTTP and HTTPS URLs, and because the External Sites app embeds external links in IFrames.

Discourse does not work in an <iframe> tag and your Discourse server will refuse the connection.

3 Likes
#5

Thank you! But why then is there a “SSO integration” app, if the integration is impossible? Is there some workaround to allow for Discourse to be embedded as an iframe?

Edit: I created a post at the Nextcloud forum now. Will report back if I get any clarity from there.

#6

Okay, so a user at the Nextcloud forum simply confirms that Discourse seems to be the issue, as it does not work in iframe. A quick google pointed me to this 4 year old Github project though:
https://github.com/BeXcellent/discourse-allowiframe/

After I’ve edited app.yml to account for this plugin, what do I do next? Do I need to rebuild Discourse to fully install it?

#7

Yes, a rebuild will be required to install any plugin

Just as a heads up, a plugin not maintained for over 4 years has a strong chance of breaking.

1 Like
#8

You can submit issues and feature requests on the project github. Note it hasn’t been updated for version 20 yet. Click for details.

1 Like
#9

Thanks for the tip! You haven’t used this app yourself, have you?

#10

For the record: I installed the “allowifram”-plugin, and my Discourse did indeed crash. :stuck_out_tongue:

#11

For anyone interested, I did ask the developer if there had been an attempt to integrate Discourse into Nextcloud: https://github.com/soudis/discoursesso/issues/18
The developer said no, but that he/she had hacked around the iframe issue with the following plugin: https://github.com/soudis/discourse-allow-same-origin
Have not yet tried it myself.

1 Like
#12

Sorry for the late response here but I have been exploring nextcloud and discourse integration options recently. You’ve probably figured all this out by now but I’d be interested to compare notes. Are you still using discourse and nextcloud together and if so can you share some more info on what you’re trying to achieve and how it’s working out for you? I’d appreciate it!

Yes, as you have learned, Discourse does not like to be loaded in an iframe. It has always been this way. The workaround is to use Discourse’s own very flexible theming system to add a header that matches your main site. You can also then use nextcloud’s theming system to update it to match, as you see fit. In the nextcloud external sites admin setting, you’ll then select the redirect option meaning the site does not allow embedding. The link to discourse will then open in the same browser tab, without the iframe.

Screen Shot 2021-05-05 at 3.58.30 PM

The Nextcloud discoursesso app you refer to is just about allowing people to authenticate to your discourse site via Nextcloud. Looks like you are setting it up correctly. You just need to go to the URL of your discourse and try to log in, and you will see you are logged in using your nextcloud credentials.

Note that in Discourse, Discourse SSO has been renamed to Discourse Connect. Enabling it will totally replace any other login options in your discourse so you will want to use it carefully.

4 Likes
#13

Any luck with this plugin? :eyes:

#14

I have installed the plugin but I still get “Failed to get Discourse notifications”