Wordpress SSO סוגר את האתר

תמיכה WordPress

סיכום מבוסס בינה מלאכותית

The discussion revolves around maintaining user access to a Discourse forum after a WordPress site using SSO is taken down. paul.mourer asks if users can still log in after the WordPress site closes, particularly regarding password resets. RGJ explains that the migratepassword plugin supports WordPress password hashes and outlines a process: export WordPress user hashes from the user_pass column in the WP database, match them to Discourse users via the external_user_id in single_sign_on_records, and store the hashes in the user_custom_fields table under the import_pass key. Once the plugin is installed, users can log in with their existing credentials. paul.mourer clarifies the technical steps, confirming that the hashes are not stored in Discourse by default and must be manually added as custom fields. RGJ confirms the process and clarifies the database structure.

1

Hi there,

I am working with someone to move their site off of wordpress and they are currently utilizing the wordpress SSO feature for their discourse forum.

Is there any way to keep the users and allow them to log in once the wordpress site is no longer live? Is this something that has to be done before the site goes down?

If we close the site and the users try to reset their password, will that allow them to then log in?

2

Our migratepassword plugin (here) supports Wordpress hashes.

You could do the following:

  • export the encrypted Wordpress password hashes together with the user ID’s
  • lookup the associated Discourse user (matching the Wordpress ID with the Discourse external SSO ID)
  • add the encrypted password hash as a user custom field called import_pass
  • install the plugin
  • :partying_face: enjoy your users logging in with their existing email/pass combination
3

Thanks @RGJ! excuse my unfamiliarity here – the WP password hashes will be in the WP DB I’m assuming? there isn’t anything related to this stored in the discourse DB for this login flow?

I’m probably not going to be doing this in discourse itself, so the hashes would just be an additional column in the user table for discourse (column title import_pass)? And then once the plugin migratepassword is installed, it will just work with that column/data there?

4

Yes, user_pass in the users table.

There is an external_id stored in Discourse, which can be associated with the Wordpress user ID.
Table: single_sign_on_records, columns: user_id and external_user_id.

Almost. Would be additional records in a table (user_custom_fields) associated with the users (user_custom_fields.user_id = user.id) and user_custom_fields.name='import_pass'.

Yep.