Ok-- imagine this simple scenario: User A logs into my site and then clicks ‘Forums’ on the site. They are redirected to Discourse, which calls back to my site via SSO and they’re authenticated and automatically logged into Discourse. Great, works perfectly. After a while, User A walks away fr…

You can hookup an api call to automatically log out discourse: Discourse API Docs

Right, but how can I do this if the user has “walked away” from the computer and their session expired? Maybe this is more of a PHP question (which is what my main site is written in)…

This trick should still work: [image] Is there a "log_in" SSO API endpoint? SSO You can’t set cookies for another domain from the server, so that wouldn’t work stuck_out_tongue Try giving the user a page with this on it: <embed src="https://discourse.example…

@riking I’m sorry, I had a curious question. How do services like auth0 handle automatic logout for discourse?

[image] pnoeric: User A walks away from the computer and their session expires automatically. They never specifically click log out in my app OR on Discourse. [image] pnoeric: After a while, User A walks away from the computer and their session expires automatically. Could you clarify …

Thank you for your reply! I realized that this problem ultimately is all about managing the user on the main site. If the user manually logs out of the main site, then I have to call Discourse (via API) to log them out there as well. And if the user doesn’t log out but their session expires, I hav…

Comment déconnecter un utilisateur si on ne le connaît pas ?

Dev

riking (Kane York) Mars 23, 2020, 10:10 4

Cet astuce devrait toujours fonctionner :

Sujet		Réponses	Vues
Discourse members being logged out - how to fix? Support	11	1779	Mai 25, 2020
Programmatically log users out of discourse Support	1	986	Mai 4, 2021
Using Discourse as SSO - control logout? Support	6	696	Juin 6, 2018
How to sync logout with SSO or Browser session? Support	3	1872	Septembre 8, 2020
Single Sign-Out? SSO	11	4252	Mai 31, 2018

Comment déconnecter un utilisateur si on ne le connaît pas ?

Sujets connexes