I need a URL that will return 200 for a logged in user and 401 or 403 if the user is not logged in. If require_login is checked, every page does a 301 to the login page.

Is this a user request, i.e. using the current users session? Or… Is this an admin API request using an admin API key?

[画像] DeanMarkTaylor: Is this a user request, i.e. using the current users session? Yeah. It’s me not understanding the question I’m asking. I’m trying to do an auth_request in NGINX to tell whether the request is coming from a user that’s logged in by querying an URL to see whether it gets a…

You could try /session/current.json It will return 200 if authenticated and 404 if not. Generally .json / API requests don’t redirect. app/controllers/application_controller.rb main else current_user end end …

That seems promising. I’ll keep poking at it. Many thanks!

Is there an easy way to do this from a different subdomain? Example, the forum is at forum.example.com and the request is coming from example.com (either from the frontend or backend code).

Sure. You can make an API call from anywhere.

But this specific call needs to be done from the frontend, since it will use the session cookies sent by the browser to the forum.

The Discourse session cookie appears to be just for the subdomain, so would the cookie be accessible from the top-level domain? I see _forum_session on the Discourse subdomain but it doesn’t appear when visiting the TLD. If the cookie were available on the top-level domain, I was thinking that it w…

If you want anything fancy like this you would need to implement your own CurrentUserProvider

[画像] sam: If you want anything fancy like this you would need to implement your own CurrentUserProvider Thanks, I just looked it up and found this other thread , so I’ll ask some more questions about it over there. Edit: it looks like we can do what we need with Discourse as an SSO provider.

Is there an endpoint to check if a user is logged in

Development

sam (Sam Saffron) 2018 年 7 月 23 日午後 9:43 12

If you can do it with SSO I highly recommend you go that path vs a provider

トピック		返信	表示
Get logged in user info from another website SSO	11	525	2024 年 2 月 15 日
How can I check in my website if the user is logged in to my Discourse? Development	3	986	2023 年 5 月 31 日
Cookie Based Authentication in discourse via Plugin SSO	6	2325	2018 年 9 月 5 日
Detecting user already logged in when using SSO Feature sso , discourseconnect	10	5675	2016 年 11 月 5 日
Checking whether a user is logged in on Discourse from another website SSO	5	497	2024 年 7 月 23 日

Is there an endpoint to check if a user is logged in

関連トピック