I have managed to successfully connect Auth0 to my discourse forum. However, it is not working as planned. Currently: 1 - User logs into our webapp at example.com with auth0 2 - User navigates to forum.example.com 3 - User has to click “log in” again 4 - User is automatically logged in without…

The only way to have that working is by changing login_required to true in the site settings, but that will make your forum lose anonymous access, google bot crawling, etc.

I have done this, and the user still has to click “log in” - which automatically logs them in

Oh, when using OAuth2 instead of DiscourseConnect you also need to check the setting auth immediately .

I have also got that enabled :unamused:

Could it be an issue with the fact that users auth at example.com , but it is not authenticating with the subdomain forum.example.com ? Could issues be caused if they auth with ex.example.com then go to forum.example.com ?

Nope. Have you disabled every other auth method? If auth immediately is broken that is a bug we must fix.

Yep, local log in is disabled. Only oauth2 is enabled.

It’s already working for me: GET https://forum.com RESPONSE 302 → https://forum.com/auth/oauth2_basic GET https://forum.com/auth/oauth2_basic RESPONSE 302 → https://auth0.com/login

Comment empêcher une autre connexion avec Auth0 et le plugin de base OAuth2

Soutien

Falco (Falco) Juin 23, 2021, 7:38 5

Ah, lorsque vous utilisez OAuth2 au lieu de DiscourseConnect, vous devez également vérifier le paramètre auth immediately.

2 « J'aime »

Sujet		Réponses	Vues
Seamless Login Between App and Forum via WebView with Shared Auth0 Authentication Support	2	74	Juillet 3, 2025
Use OAuth Plugin for Auth0 more seamlessly SSO	10	1389	Décembre 11, 2024
Login automatic without clicking button "login" SSO	4	1448	Avril 7, 2023
Silent login/signup via Auth0 SSO	8	4826	Mai 29, 2018
OAuth account creation fails due to CSRF detection immediately after logging into Auth0 on same browser SSO oauth2	8	2679	Février 16, 2023

Comment empêcher une autre connexion avec Auth0 et le plugin de base OAuth2

Sujets connexes