I'd like to request a couple of extensions to be added to Blomstra.
(1) SSO and (2) Custom Paths
- Edited
I think the second one should pose no issue. We will have to look at them, review their quality and test them so that we can confirm they are working as intended.
Will update here once we know more.
RishitKedia Custom Paths has now been added to the Blomstra skeleton and will be available after the next deployment. Note this is a premium extension.
I'm evaluating the SSO extension you requested, further updates to follow..
Hi @RishitKedia
Just a quick question whilst I look over the SSO extension you requested... Which platform are you planning to use SSO against?
ianm Hey!
Shopify; though, this is going to be a custom implementation because Shopify does not support this natively. I'm planning to use the PHP plugin (for this extension) in the middle to integrate my Shopify store's authentication system with Flarum.
RishitKedia I understand, thank you for that.
Perhaps fof/oauth (which has an extender to register additional providers) or fof/passport could be utilized in conjunction with something like https://plugins.miniorange.com/how-to-use-shopify-as-an-identity-provider-for-single-sign-on-sso
@RishitKedia just fyi @[deleted] and I are talking about this on discord, I remember our chat on discord related to your feature request and the articles you shared ️
ianm Yeah, that is indeed possible; I've seen and considered that, but I'm looking to avoid the extra recurring cost.
@RishitKedia both @luceos and I have reviewed the SSO extension you requested.
We are not comfortable with installing this particular extension as it would have
a) a negative performance impact and
b) cause unwanted side effects in terms of security
I realise this is not quite the answer you were looking for, but we must only allow code into our stack that we are confident will not impact your site, or the sites of other clients.
I'm happy to work with you to explore if any other extensions might be sufficient for your needs.
ianm I'm not sure how this extension would result in either (a) or (b); could you elaborate, if I may ask?
With that being said, if y'all are not comfortable/confident, I respect your decision, and will look at the other options again then.
RishitKedia weI reviewed the extension and noticed that it calls the database unnecessarily on each request and automatically marks every user verified no matter through which source it was added.
luceos Interesting, thanks for that.
- Best Answerset by luceos
@RishitKedia the Custom Paths extension was installed a while ago. Can we close this request?
If you'd like to discuss options for SSO feel free to reach @[deleted] on discord, I think that makes the most sense to get to a sensible resolution for your question. Otherwise feel free to create a new request under the requests tag here on Greenhouse.
luceos Can we close this request?
Yes.
luceos If you'd like to discuss options for SSO feel free to reach @ianm on discord, I think that makes the most sense to get to a sensible resolution for your question. Otherwise feel free to create a new request under the requests tag here on Greenhouse.
Agreed, thanks. ️