How to hook up JWT Single Sign On to Discourse

Soporte
1

We are investigating using Discourse as a forum section for our website. Our existing app is a Play 2.5 application with it’s own login setup and a JWT authenticator. Our goal is to implement some form of single-sign-on setup where users will be redirected (from Discourse) to our Play app to authenticate, the JWT token is created and sent back (via redirect) to Discourse for use in validating subsequent actions.

I found both GitHub - discourse/discourse-omniauth-jwt: An OmniAuth strategy that uses JSON Web Token for Single Sign-On and GitHub - discourse/discourse-jwt: Discourse Auth support for JSON Web Tokens (JWT) but am unsure if they will support what we are looking for or how to integrate them (I am very new to Discourse). Is there a similar alternative (with JWT) that I am unaware of?

2

The official JWT Plugin is what you want. We’ve deployed it in production and it works well for people.

If you’re unsure how to install a plugin, I suggest you check out @techAPJ’s excellent guide.

7

Hola, estamos intentando implementar un flujo similar al del post original. Revisé el plugin JWT y la guía de instalación, y parece que solo describen cómo instalarlo en instancias autoalojadas, y el plugin no aparece listado en ningún plan comercial. Por lo tanto, mi pregunta es: ¿cómo es posible usar el plugin JWT con una instancia que no sea autoalojada?

8

Lamentablemente, no incluimos la compatibilidad con JWT en nuestro plan empresarial y recomendamos encarecidamente que utilices OpenID, OAuth2 o DiscourseConnect. ¿Es esa tu única opción para la autenticación?