How to allow only certain user role can do login

Hi,

It sounds like you are wanting to limit SSO flow based on the user roles in WordPress. If this correct?

Yes, and than you for your response

@justingreerbbi can you please help to use role based login in client side app?

I only want to allow xyz user role (it’s wordpress user role ) to be able to do login, where the wordpress act as oauth server.

If you will provide me the solution then it’s very good.

We looked into the idea of this and have started implementing the feature into the server. We will then add the feature into our client plugin as well. Right now there is no timeline for the feature.

We plan on starting development, tomorrow and is expected to take a week and then a couple of days for repo pushes.

Thank you for the update

I’m waiting for role based login feature

@gigabyteservice,

Thank you for checking back into the project for this feature. Since this is a feature for OAuth 2.0 and WordPress on the server-side of things, we have added a new action right before the issuing of an access token.

The codebase is currently in the SVN trunk here on WP.org. In order to limit access tokens per user and client id, one could add the following snippet to a custom plugin or their themes functions.php file.

/**
 * Example of only allow the role of administrator to for a given client.
 */
add_action( 'wp_oauth_server_user_check', 'wp_oauth_server_user_check_callback', 2, 99 );
function wp_oauth_server_user_check_callback( $clientId, $userId ) {

	if ( $clientId == 'mvJsGPYZNHgRVSeoNQfrT4FN6wpunvVJ0FbHu9Hi' ) {
		$user_meta  = get_userdata( $userId );
		$user_roles = $user_meta->roles;
		if ( ! in_array( 'subscriber', $user_roles ) ) {
			wp_send_json( array(
				'error' => 'invalid_request',
				'error_description' => 'User role does not have authorization to make this request',
			), 401 );
			exit;
		}
	}
}

The action hook provides the given client ID and User ID. With this information, one could take the info and filter to and return an error (failed authorization/login) if the criteria do not match.

Hi

I’ll thank if you could tell me if this works in the free version.

I’m getting this error: error/Could not decode JSON token response

Thanks!

Regards,
Carlos.

oops… I have read it again.. it’s not still deployed

Sorry ??

DOes this work now; for the free version of the OAUTH server software?