Integrar Discourse con MemberMouse

[lkramer (Leah Kramer)]

Mantengo Discourse y MemberMouse funcionando en 2 sitios. Espero que esta guía sea útil para otras personas. Sus especificaciones exactas pueden diferir de los resultados que yo busqué. Esta guía asume que está familiarizado con los hooks de MemberMouse, los filtros y la interfaz PHP de MemberMouse. También asume que puede agregar código personalizado a WordPress cómodamente a través de functions.php o su propio plugin personalizado.

La siguiente guía es lo que agregamos para:

• Activar/desactivar al usuario en Discourse dependiendo de su estado de membresía en MemberMouse
• Configurar grupos de Discourse que representen los niveles de membresía de MemberMouse
• Sincronizar instantáneamente los cambios de nombre de usuario/correo electrónico
• Y varios otros ajustes menores útiles

Paso 1: Instale Discourse, WordPress y el plugin wp-discourse para WordPress

Configure y haga funcionar WordPress, Discourse y el plugin wp-discourse para WordPress correctamente, con WordPress como proveedor de SSO. Hay muchos hilos sobre esto aquí.

Paso 2: Marque la casilla para permitir que el plugin wp-discourse cree un nuevo usuario en Discourse cuando se crea un usuario en WordPress

Descubrí que, para que wp-discourse realmente cree un usuario en Discourse cuando se crea un usuario en WordPress, necesitaba realizar un cambio de código en el plugin. Esto se debe a que el plugin depende de la acción “wp_login”, pero se comporta de manera diferente en MemberMouse que en el comportamiento normal de WordPress. Por lo tanto, debe agregar esta línea al archivo /lib/discourse-sso.php en la función pública __construct( $wordpress_email_verifier ):

add_action( 'my_mm_account_added', array( $this, 'create_discourse_user' ), 10, 2 );

Y en functions.php o en su propio plugin, agregue:

function add_user_to_discourse($data) {
    do_action( 'my_mm_account_added', $data["username"], get_user_by('ID',$data["member_id"]) );    
}
add_action('mm_member_add', 'add_user_to_discourse');

Paso 3: Si lo desea, haga que los nuevos usuarios no necesiten hacer clic en un enlace de activación de correo electrónico de Discourse

Por defecto, Discourse enviará un correo electrónico de activación al nuevo usuario, pero elegí desactivarlo ya que el usuario ya ha superado un número satisfactorio de obstáculos en WordPress para unirse. Si su sitio de WordPress tiene una barrera baja para unirse, es posible que no quiera omitir el correo electrónico de activación. En nuestro caso, hay que pagar para unirse. Agregue esto a functions.php o a un plugin especial que cree.

add_filter( 'wpdc_auto_create_user_require_activation', 'my_wpdc_auto_create_user_require_activation' );
function my_wpdc_auto_create_user_require_activation( $require_activation ) {
    return false;
}

Paso 4: Siempre que ocurra un cambio de cuenta en un usuario de MemberMouse:
Mapee los niveles de membresía de MemberMouse a los grupos de Discourse
Sincronice la dirección de correo electrónico/nombre de usuario
Active/desactive al usuario en Discourse según corresponda

Puede agregar esto a functions.php o a su propio plugin.

add_action('mm_member_membership_change', 'run_discourse_sync_based_on_mm_acct_change');
add_action('mm_member_status_change', 'run_discourse_sync_based_on_mm_acct_change');
add_action('mm_member_account_update', 'run_discourse_sync_based_on_mm_acct_change');

En la función run_discourse_sync_based_on_mm_acct_change, desea:

(1) Usar la API de Discourse para obtener el nombre de usuario de Discourse de este usuario (puede ser ligeramente diferente al de WordPress debido a las propias reglas de nombre de usuario de Discourse) y el número de ID de Discourse. (documentación)

(2) Mapee el ID de nivel de membresía de MemberMouse al ID de grupo equivalente de Discourse y luego establezca su grupo en Discourse. Primero debe eliminar su antiguo ID de grupo. (documentación). Luego puede establecer el nuevo grupo. (documentación)

(3) Sincronice su nombre de usuario y correo electrónico si han sido cambiados en WordPress. Solo permitimos que estos se cambien en WordPress. Obtuve ayuda con esta parte aquí.

(4) Active/desactive al usuario en Discourse dependiendo de su estado en MemberMouse. Activar (documentación). Desactivar parece estar faltando en la documentación de la API. $url = $url_base.‘admin/users/’.$discourse_userid.‘/deactivate.json?’.$api_auth;

Paso 5: Redirección automática de vuelta a Discourse cuando sea apropiado

(Recomiendo encarecidamente esperar con esta parte hasta que tenga una muy buena idea de cómo funcionan WordPress y Discourse juntos.)

Si un usuario NO ha iniciado sesión en Discourse y NO ha iniciado sesión en WordPress. Y llegan a una URL en Discourse y hacen clic en el botón azul de Iniciar sesión, son llevados a WordPress para iniciar sesión, pero luego MemberMouse dirige al usuario a la página a la que esté configurado para redirigir en la configuración de MemberMouse. Lamentablemente, el usuario no es redirigido de vuelta a Discourse. Así es como resolví esto. Puede agregar esto a functions.php o a su propio plugin. (Hilo para más información.)

// Si la persona vino del foro de Discourse, envíela exactamente a donde estaba después de iniciar sesión
function my_mm_login_redirect( $infoObj ) {
    if ( @$_COOKIE['detected_forum_referal'] != '' ) { // Debe ocuparse de establecer esta cookie temporal si el usuario acaba de llegar vía Discourse
        $current_user       = $infoObj->user;
        $user_id            = $current_user->ID;
        // Payload y firma.
        $payload = @$_COOKIE['mm_cookie_sso'];
        $sig     = @$_COOKIE['mm_cookie_sig'];
        // Cambie %0B de nuevo a %0A.
        $payload = rawurldecode( str_replace( '%0B', '%0A', rawurlencode( $payload ) ) );
        // Valide la firma.
        $sso_secret = 'YOUR-SSO-SECRET';
        $sso        = new \WPDiscourse\SSO\SSO( $sso_secret );
        if ( ! ( $sso->validate( $payload, $sig ) ) ) {
            return '';
        }
        $nonce  = $sso->get_nonce( $payload );
        $params = array(
            'nonce'               => $nonce,
            'username'            => $current_user->user_login,
            'email'               => $current_user->user_email,
            'external_id'         => $user_id,
        );
        $params = apply_filters( 'wpdc_sso_params', $params, $current_user );
        $q = $sso->build_login_string( $params );
        do_action( 'wpdc_sso_provider_before_sso_redirect', $user_id, $current_user );
        // Redirija de vuelta a Discourse.
        return('YOUR-FORUM-BASE-URL' . '/session/sso_login?' . $q);
    }
    return('');
}
add_filter( 'mm_login_redirect', 'my_mm_login_redirect', 10, 1 );

[shim (john shim)]

if i May ask do you need to install the Discourse on its own or … you just need the discourse plugin in your wordpress

[lkramer (Leah Kramer)]

You need to install Discourse on it’s own. The plugin just helps WordPress and Discourse talk to each other.

[shim (john shim)]

thank you m new here and i like this community so im in a process on launching it on my Google cloude…

[andrec (André)]

@lkramer - how does this workflow need to change to use MemberMouse Bundles instead of the MM membership status?

(For us MM memberships are too limited, as a customer can only be in one at a time (free or paid). We have many products, so we use Bundles which allows us infinite flexibility.)

Our use case is as follows:

We sell multiple courses. We control course access using Bundles. “Product 1 Bundle” and “Product 2 Bundle,” etc. Any one customer can have access to one or many (or all) of course courses.

Within Discourse we have a separate course forum (category/group) for each product…

We want customers of “Product 1 Bundle” to only be able to see the Discourse category/group for that course, and so on.

Any idea how your workflow would need to change to allow for our use case?

Thx a ton in advance, Leah!

[lkramer (Leah Kramer)]

In order to rely on bundles rather than membership levels – anywhere I mentioned membership status/level, you’d just check the person’s bundle status via a MemberMouse php function. So check whether they have bundle X and whether it’s currently ‘active’ and if so, put them in Discourse group X or else remove them from group X. I believe the MemberMouse php function you want is something like this:

if ( mm_member_decision(array("hasBundle"=>"1")) )

Now, regarding only making certain Discourse categories accessible to certain Discourse groups, I’ve never tried it but according to this thread here you can restrict categories to certain groups:

Is it possible to restrict categories to specific groups of vetted users?

Hello! I would like to use discourse to build a community for information security professionals and novices. Some of this would involve sharing sensitive information, but only with users that have been vetted, and can be trusted, Is there any way to restrict categories to specific users. Apologies if this question has been asked before. I searched, but could not find anything.

So as long as you can successfully set/unset a person’s Discourse group based on their bundle (which should be do-able), then you can achieve your goal of only having access to certain categories.

[lkramer (Leah Kramer)]

Another tidbit of potentially helpful info – To learn to use the Discourse API, write some small isolated scripts to get small pieces working as a proof of concept and to know exactly what code works. There are often several ways to interact with an API even within one language. So, e.g, write a little script that just tests the concept of setting and unsetting someone’s Discourse group. This is what I did and then I knew it was safe/reliable to add them into the MemberMouse eco-system where approprirate.

[riking (Kane York)]

The best way to sync group membership is, of course, the sync_sso and during SSO login (which should go through the same function!! you don’t want to add someone from a group and take them back out when they log in) — because this is way more efficient, only 1 API call to change as many groups as you want.

[andrec (André)]

Thx @lkramer! (and @riking)

[lkramer (Leah Kramer)]

Thx @riking. So are you saying you can set/unset multiple groups in sync_sso. That’s good to know.

[pfaffman (Jay Pfaffman)]

@lkramer

add_action( ‘my_mm_account_added’, array( $this, ‘create_discourse_user’ ), 10, 2 );

This wasn’t working for me, and I just upgraded, and now there is no create_discourse_user, it seems.

@simon, have you got a suggestion here?

It seems that having to edit the plugin to make membermouse work is something of a bummer. I think that I can imagine code that would solve that if I first could get WordPress to trigger creating the account.

[simon]

@pfaffman

This wasn’t working for me, and I just upgraded, and now there is no create_discourse_user, it seems.

It’s still there: https://github.com/discourse/wp-discourse/blob/master/lib/utilities.php#L306

You need to call it with the namespace WPDiscourse\Utilities\Utilities::create_discourse_user( $user )

There is also a sync_sso_record function that would be better to use if you are able to. It takes an array of sso parameters as an argument. You can get them from the get_sso_params function.

I’m in the process of cleaning up this file. I won’t remove any functions that I’ve posted about on meta. If I break anything, let me know.

Edit: I read the OP more closely. I hadn’t realized it was editing the plugin’s code. That part will be broken by the most recent update. It would be better to call either the create_discourse_user or the sync_sso_record function from WPDiscourse\Utilities, and add the my_mm_account_added hook to your functions.php file or a separate plugin.

[pfaffman (Jay Pfaffman)]

Thanks, @simon!

Here’s what I’m doing now:

function add_user_to_discourse($data) {
	do_action( 'my_mm_account_added', $data["username"], get_user_by('ID',$data["member_id"]) );
    error_log ("Doing add_user");
}

add_action('mm_member_add', 'add_user_to_discourse');

Also, I have a handful of actions like

add_action('mm_member_membership_change', 'run_discourse_sync_based_on_mm_acct_change');
add_action('mm_member_status_change', 'run_discourse_sync_based_on_mm_acct_change');
add_action('mm_member_account_update', 'run_discourse_sync_based_on_mm_acct_change');

Should all of these call sync_sso_record? And what should go in $user when I call WPDiscourse\Utilities\Utilities::create_discourse_user( $user )? (I’m going to RTFC now, but perhaps your 2 minutes can save me an hour. )

Edit: OK, should something like this work? I see that it’s getting called, but the user’s not getting created.

function add_user_to_discourse($data) {
    $user['name'] = $data['first_name'] . " " . $data['last_name'];
    $user['user_email'] = $data['email'];
    error_log ("Calling create_discourse_user");
    WPDiscourse\Utilities\Utilities::create_discourse_user( $user );
}

[simon]

Assuming you are also adding the user to a group, I think you could just call WPDiscourse\Utilities\Utilities::add_user_to_discourse_group( $user_id, 'group,names' ). That gets the sso params for then calls sync_sso_record with the params. The remove_user_from_discourse_group function works in a similar way, except it removes users from a group or groups.

If you just want to create or update a user without dealing with groups, you can do something like this:

$user = get_user_by( 'id', 1 ); // Supply user_id here.
$sso_params = WPDiscourse\Utilities\Utilities::get_sso_params( $user );
WPDiscourse\Utilities\Utilities::sync_sso_record( $sso_params );

If SSO is enabled, I don’t think there would be a reason to prefer the create_discourse_user function over the sync_sso_record function. If you do need to use it, it takes a WordPress user object as the argument: $user = get_user_by( 'id', 1 );

[pfaffman (Jay Pfaffman)]

@simon

Assuming you are also adding the user to a group, I think you could just call

Yeah. Sadly, I started with code that was written before add_user_to_discourse_group existed. I was just wondering whether I should change my working API calls to use that instead.

It’s not obvious to me that add_user_to_discourse_group will create the user. Is that happening somewhere that I don’t see?

[simon]

@pfaffman

It’s not obvious to me that add_user_to_discourse_group will create the user. Is that happening somewhere that I don’t see?

Yes, it creates a user by sending the SSO parameters to the Discourse /admin/users/sync_sso route. It actually takes a comma separated list of group names as its argument (no spaces between names), so it should be renamed. You can also call it with an empty string as the group_names argument. You have to at least supply an empty string for the group names, or it will throw an error.

[pfaffman (Jay Pfaffman)]

So, this is a zillion times easier than it used to be!

add_user_to_discourse_group( $user_id, $group_names ) wants the WP userid? and the Discourse group name (no fussing in the json to figure out the group_id?!?!)?

Now I just need to find the $user_id and I’ll be golden.

Edit: $user = get_user_by('ID',$data["member_id"])

Edit: I’m all set! The version of the MemberMouse bundle-to-group function that I was working on yesterday was over 200 lines. The working version today is about 40.

Thanks again, @simon!

[simon]

Great! I’ll document the changes to the functions soon. They take the same arguments as before, but behave a little differently. One thing to note is that Discourse will still consider the add_user_to_discourse_group and remove_user_from_discourse_group functions to be API calls - they are just making fewer API calls than the previous version did.

The functions return the status code that is returned from the Discourse request. You want to be getting a 200 response. If you’re adding a lot of users at the same time, you need to look out for 429 status codes and find some way of dealing with them. (When adding one user at a time it shouldn’t be an issue.)

[pfaffman (Jay Pfaffman)]

@simon

Great! I’ll document the changes to the functions soon. They take the same arguments as before, but behave a little differently.

Well, I’m pretty sure that last summer when I did this before there was a lot more that I had to do with my own darn API calls. This is pretty great. Hooray that this is now your day job!

[lkramer (Leah Kramer)]

Maybe you can write a new and improved MemberMouse guide, Jay, when this is all said and done. Come to think of it, just a general, “hook Discourse up to your membership plugin” guide would be great for ANY membership plugin. I’m guessing they all have similar “hooks” as MemberMouse.