(1) SSO and (2) Custom Paths

RishitKedia

I'd like to request a couple of extensions to be added to Blomstra.

ianm

RishitKedia Custom Paths has now been added to the Blomstra skeleton and will be available after the next deployment. Note this is a premium extension.

I'm evaluating the SSO extension you requested, further updates to follow..

luceos

I think the second one should pose no issue. We will have to look at them, review their quality and test them so that we can confirm they are working as intended.

Will update here once we know more.

ianm

Hi @RishitKedia 👋

Just a quick question whilst I look over the SSO extension you requested... Which platform are you planning to use SSO against?

RishitKedia

ianm Hey! 👋

Shopify; though, this is going to be a custom implementation because Shopify does not support this natively. I'm planning to use the PHP plugin (for this extension) in the middle to integrate my Shopify store's authentication system with Flarum.

ianm

RishitKedia I understand, thank you for that.

Perhaps fof/oauth (which has an extender to register additional providers) or fof/passport could be utilized in conjunction with something like https://plugins.miniorange.com/how-to-use-shopify-as-an-identity-provider-for-single-sign-on-sso

RishitKedia

ianm Yeah, that is indeed possible; I've seen and considered that, but I'm looking to avoid the extra recurring cost. 😛

luceos

@RishitKedia just fyi @[deleted] and I are talking about this on discord, I remember our chat on discord related to your feature request and the articles you shared 👍️

ianm

@RishitKedia both @luceos and I have reviewed the SSO extension you requested.

We are not comfortable with installing this particular extension as it would have
a) a negative performance impact and
b) cause unwanted side effects in terms of security

I realise this is not quite the answer you were looking for, but we must only allow code into our stack that we are confident will not impact your site, or the sites of other clients.

I'm happy to work with you to explore if any other extensions might be sufficient for your needs.

RishitKedia

ianm I'm not sure how this extension would result in either (a) or (b); could you elaborate, if I may ask?

With that being said, if y'all are not comfortable/confident, I respect your decision, and will look at the other options again then.

luceos

RishitKedia weI reviewed the extension and noticed that it calls the database unnecessarily on each request and automatically marks every user verified no matter through which source it was added.

RishitKedia

luceos Interesting, thanks for that.

luceos

@RishitKedia the Custom Paths extension was installed a while ago. Can we close this request?

If you'd like to discuss options for SSO feel free to reach @[deleted] on discord, I think that makes the most sense to get to a sensible resolution for your question. Otherwise feel free to create a new request under the requests tag here on Greenhouse.

RishitKedia

luceos Can we close this request?

Yes.

luceos If you'd like to discuss options for SSO feel free to reach @ianm on discord, I think that makes the most sense to get to a sensible resolution for your question. Otherwise feel free to create a new request under the requests tag here on Greenhouse.

Agreed, thanks. 👍️