SSO on a WP, publish from another WP

Product Support WordPress

AI-generated summary

The user iamntz is experiencing issues with Single Sign-On (SSO) on a WordPress (WP) site posting to a Discourse forum. Despite no error messages when posting, the posts don’t appear on the forum, and Discourse logs show a “Can’t verify CSRF token authenticity” error.

_sigurdur suggests that the issue might be with API communication, prompting iamntz to check the API key, which reveals a trailing space causing the problem.

codinghorror recommends stripping extra spaces from API keys to prevent similar issues in the future, and iamntz offers to create a pull request to implement this fix. The pull request is later merged by benword.

1

Hi guys. I’m having this set-up:

  1. one site that manages authentification (WP1) for discourse. The forum is set to not accept other users than those that are coming from this WP1
  • multiple sites (WPx) are trying to post their latest posts on discourse.

I get no error when i try to post, yet the posts doesn’t shows up on Discourse

This is what I get on logs:

Can't verify CSRF token authenticity
Discourse::InvalidAccess (Discourse::InvalidAccess)

Tried to regenerate api keys, but with no luck. Also i tried to make a request with Postman and I get the same errors on logs, but postman also shows me a 500 error (with no extra details).

Am I doing something wrong? Thanks!

(i’m on latest versions of wp, discourse, plugin, all).

2

What happens when you post from the wordpress that does the authentication?

3

Absolutely the same thing: nothing :smiley:

4

Then you have a problem with your API communication.

  1. Did you copy the correct API key to wordpress?
  2. Did you configure the Discourse plugin correctly? (correct user)
5

Actually… I may be dumb.

It seems that the API key had a space at the end. Now everything seems fine!

Thanks!

6

Hmm can we check for extra spaces in the API key @techapj and strip them? If this is an easy fix in an easy place let’s make it so.

7

I’ll probably send a couple of PRs by myself, including this quick fix :wink:

8

Thanks for those pull reqs :+1: — all merged!