I have managed to successfully connect Auth0 to my discourse forum. However, it is not working as planned. Currently: 1 - User logs into our webapp at example.com with auth0 2 - User navigates to forum.example.com 3 - User has to click “log in” again 4 - User is automatically logged in without…

The only way to have that working is by changing login_required to true in the site settings, but that will make your forum lose anonymous access, google bot crawling, etc.

I have done this, and the user still has to click “log in” - which automatically logs them in

Oh, when using OAuth2 instead of DiscourseConnect you also need to check the setting auth immediately .

I have also got that enabled :unamused:

Could it be an issue with the fact that users auth at example.com , but it is not authenticating with the subdomain forum.example.com ? Could issues be caused if they auth with ex.example.com then go to forum.example.com ?

Nope. Have you disabled every other auth method? If auth immediately is broken that is a bug we must fix.

Yep, local log in is disabled. Only oauth2 is enabled.

It’s already working for me: GET https://forum.com RESPONSE 302 → https://forum.com/auth/oauth2_basic GET https://forum.com/auth/oauth2_basic RESPONSE 302 → https://auth0.com/login

Comment empêcher une autre connexion avec Auth0 et le plugin de base OAuth2

Soutien

Falco (Falco) Juin 23, 2021, 7:38 5

Ah, lorsque vous utilisez OAuth2 au lieu de DiscourseConnect, vous devez également vérifier le paramètre auth immediately.

Sujet		Réponses	Vues
Seamless Login Between App and Forum via WebView with Shared Auth0 Authentication Support	2	76	Juillet 3, 2025
Use OAuth Plugin for Auth0 more seamlessly SSO	10	1393	Décembre 11, 2024
Login automatic without clicking button "login" SSO	4	1454	Avril 7, 2023
Silent login/signup via Auth0 SSO	8	4832	Mai 29, 2018
OAuth account creation fails due to CSRF detection immediately after logging into Auth0 on same browser SSO oauth2	8	2694	Février 16, 2023

Comment empêcher une autre connexion avec Auth0 et le plugin de base OAuth2

Sujets connexes