gnomeore

Thanks again for the great support!
I created fresh wordpress and Nextcloud sites (latest versions).
I installed version 1.9 of your plugin.

I created a (Sydney) Child Theme, changed to it, and used the Code Snippets plugin to insert your code into that theme’s functions.php file.
I use the url from your button (https://site.xxxx.net/wp-login.php?nc-sso=redirect) both in my login menu item and to replace my Download button with a ‘Please login to download’ link when a member is not logged in.
I have left the ‘On login redirect user to’ in your Settings empty.

While logged off, I went to the page with the download on it and clicked on my ‘Please login to download’ link.
It logged in, but went to the main page not the Download page. I also went to another page (while logged off) and clicked on my ‘Log in’ in the menu bar and it also went back to the main page.

I tried this with the ‘Temp Key Storage Type’ set to both ‘Session’ and ‘Cookie’.
I also disabled the ‘Code Snippets’ and inserted your php code directly into the Child’s functions.php file. The results were the same.

When I enter a url into the ‘On login redirect user to’ field it uses that as its redirect and goes to that page.

Any suggestions or am I doing something wrong?
I can send the log file or give you access to the sites if you wish.

[Using with Firefox 100.0.2 (64 bit) and Safari 15.1 on macOS 12.0.1]

Thank you very much for looking into this for me!

I have installed the 1.6 Update and the fresh sites work with Session option enabled.
I tried my main sites (WordPress & NextCloud installs) and the Session option did not work. I had to set it to Cookies for it to work correctly. The NextCloud site is still running v21.0.0 however – plus it has several plugins (eg Membership & Downloads). I planned to upgrade its NextCloud version early next week so I will see if that makes a difference.

I will continue to refine the login and test your great plugin – it is a real game changer.

Thanks once again for sharing and fixing this plugin for me. Great support!

I have emailed you the details for both of the freshly installed sites.

Thanks!

Updated to v1.5
I am sorry to say that the same error returned.

I tried it on both my fresh site and my full test site, both using Firefox and Safari. Safari is a clean copy with no extensions, cookies allowed and I even turned off ‘Block Cross site tracking’ but still did no work.

I also made certain that myharvey.net and www.remarpro.com cookies were allowed and present.

I got exactly the same error message, URL error, and no error messages in the log file.

I was very hopeful that this recent change would work. Please let me know if I can try anything to help solve this.

ps: 1:00am here. I will be off-line until morning.

I updated to Version 1.4.
I am sorry to say that the same error returned.

I tried it on both my fresh site and my full test site, both using Firefox and Safari.

I got exactly the same error message and no error messages in the log file.

I am sorry that it did not work. Thanks for trying. I hope that you can find a solution. Please let me know if I can try anything to help solve this.

That would be great!

I run a Not-for-profit computer training organisation and we have several hundred PDF tutorials and magazines on our Cloud Server. I use the Cloud as a File Server and just have the download links on the WordPress site. Keeps the main site a lot smaller while still being able to have access to our files via the Cloud.

Tried many SSO solutions but your’s has been the easiest and works without any third party service.

Thank you for creating it and for the fast response!

Thanks a lot for the quick response. I have been looking for this exact plugin for over a year after I found problems with others.

I found the lines (55 to 57):

??????if($_SESSION[‘state’] != $_GET[‘state’]){
??????????tims_nso_throw_error(‘returned-invalid’);
??????}

and commented them out. The login with NextCloud worked.

I went to my main sites and did the same and the login worked with all three methods (WordPress Default Login Screen – via your button, the URL given in your setup instructions, and your ShortCode).

So what is the outcome of this? Is it stable enough without the state being persistent?

PS: The URL to auto redirect to Nextcloud to authenticate the user does work correctly.