Hey folks, we’re running hosted Discourse using only GitHub authentication. We’ve successfully added functionality to our own platform to delegate authentication to our system using OAuth2, and our goal is to switch from GitHub auth to OAuth2, and hoped that users logging in using OAuth2 with the sa…

Have you enabled the “oauth2_email_verified” setting? If not, then Discourse won’t trust the email addresses from the OAuth provider, and will display the create account dialog instead.

Yep we did find that setting: [image] All of the testing I listed was performed with that setting on.

It is surprising that the error message is “Please enter a valid email address”. That suggests that the email address is invalid, rather than matching an existing account. To debug, I would suggest comparing the email address in the OAuth2 debug logs, to the emails in the database. If it works for …

Thanks for the reply! Sorry, I think that email address error must have been an error from a previous iteration of testing. After a hard refresh and another attempt, this is what I see (and have seen in other cases): [image] Note that the username is automagically-appended with a number to make …

[画像] cori: Anything else I can look at? The logic for matching by email address can be found here: plugin.rb main # frozen_string_literal: true # name: discourse-oauth2-basic # about: Allows users to login to your forum usi…

Ok, I think I see where the problem is, at least for some of these records; my test plan has been: sign up in Discourse with new users from the OAuth process in each of 3 different scenarios (our platform has a few different signin scenarios that I wanted to test) delete those users using the Admi…

Thanks for the detailed repro! :female_detective: [画像] cori: when deleting the users from the Admin UI, it doesn’t remove the corresponding rows from the plugin_store_rows table Would that be considered a bug @david ?

Yes, I think so. Although it is fairly unlikely to occur in a “real” environment. It will certainly be fixed when we migrate the plugin to ManagedAuthenticator.

This should now be fixed, thanks to @angus :smiley: https://meta.discourse.org/t/oauth2-basic-support/33879/189?u=david

GitHub 認証から OAuth2 への移行

サポート SSO

david (David Taylor) 2019 年 7 月 29 日午前 9:39 11

これで修正されました。@angus さんのおかげです

https://meta.discourse.org/t/oauth2-basic-support/33879/189?u=david

トピック		返信	表示
When I use Oauth2 login, If I already have a account , I want to connect them by email Support	1	1520	2021 年 4 月 30 日
OAuth-based login: Disable account merging Feature	5	1292	2016 年 2 月 27 日
Discourse-oauth2-basic Login Inconsistencies SSO oauth2	3	671	2019 年 11 月 18 日
Login to Discourse with custom Oauth2 provider Feature oauth2 , completed	22	274375	2020 年 7 月 6 日
Discourse SSO with OAuth2 Support	4	3234	2019 年 11 月 3 日

GitHub 認証から OAuth2 への移行

関連トピック