Blog Documentation Book a Demo
Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

User signs in on domain-one.com, can it send a login to my vanilla installation at domain-two.com?

atomikuatomiku
edited March 2012 in Vanilla 2.0 - 2.8

domain-one.com has a basic username/password login system. If the login is successful, I would like it to also post a login request to a vanilla installation at domain-two.com if possible. If preferred, I would like to do this via AJAX, as domain-one.com's login system is done with ASP... Unless with ASP I can do some kind of cURL POST?

I already have modified the entry controller to automatically create an account from the user database on domain-one.com if the login doesn't already exist. Thanks guys :)

Best Answer

  • x00x00 MVP
    edited March 2012 Answer ✓

    Check out jsConnect plugin it is cross domain. If you want help with SSO send me a message. POST'n login details is very not secure the login details could be hijacked, it also doesn't help synchronicity. Instead you need a multi-stage handshake in the background that provides proper credentials for authenticity.

    Don't modify core unless you have to, this can cause untold problem if you re not sure what you are doing.

    grep is your friend.

Answers

  • x00x00 MVP
    edited March 2012 Answer ✓

    Check out jsConnect plugin it is cross domain. If you want help with SSO send me a message. POST'n login details is very not secure the login details could be hijacked, it also doesn't help synchronicity. Instead you need a multi-stage handshake in the background that provides proper credentials for authenticity.

    Don't modify core unless you have to, this can cause untold problem if you re not sure what you are doing.

    grep is your friend.

  • atomikuatomiku

    Thanks x00, It's almost 5.30 here so home time for me! So I will be implementing this when I get back to work tomorrow. Sounds like it should be fairly straight forward. Thanks again for your answer :)

    I tried to write a plugin for the integration, but because of time restraints I couldn't learn how to properly do it. Let me show you what I have done to the entry controller, perhaps you know a way I could have done this with a module/plugin?

    http://pastebin.com/FMW4FfZT

  • atomikuatomiku

    Oh and I have added two fields to the User model: About_Info and About_CSV_ID, and one method to the user model: $User->UpdateAboutInfo

    Just for reference, About_Info is another field that contains information from the CSV file that only the admin can see.

  • x00x00 MVP

    Read this

    http://vanillaforums.org/docs/jsconnect

    yes it is a job for plugins if you are making the authenticator side vanilla.

    grep is your friend.

Sign In or Register to comment.