Alfio Piccione

@sawasblog

There is a filter in the pluign

$noAuth = apply_filters('sl_extended_no_auth_request', $noAuth, $_SERVER['REQUEST_URI'], $_SERVER['REQUEST_METHOD']);

to check the requests you don’t want to protect. the default JWT pluign protects all requests.
I introduced the filter to leave the freedom to control what to protect and what not.

@angiiedg
the gist was eliminated as I created a premium plugin.

• This reply was modified 5 years ago by Alfio Piccione.

@sawasblog

You are using an old version of the plugin. download it again. I have eliminated which part of the code that shows this error.

the token is relative to the user requesting authorization.

here are the steps:

REQUEST:
https://pasteboard.co/ITT1W1Y.png

EXCHANGE:
https://pasteboard.co/ITT27bp.png

RESPONSE:
https://pasteboard.co/ITT2iTf.png

@sawasblog

Google OAuth 2.0 Playground

https://developers.google.com/oauthplayground/
https://pasteboard.co/ITRvyyq.png

–> Google+ API v1
* https://www.googleapis.com/auth/plus.login

@sawasblog

Another small bug fixed ?? try now to see if you get the avatar.

@sawasblog

if I’m not mistaken it depends on the permissions of the facebook user.
In my live project the avatars are set for some users and for others not.

@sawasblog, @jwasily

I’d like to have your review on the plugin page. ??

Perfect!
@jwasily You solved it?

Thanks to you, I believe that this small plugin that is not easily found, is very useful. ??

@sawasblog

I revised the plugin, I fixed some things due to the fact that in my project the classes were in the theme, while in this case we are in a plugin.
I did tests in a new installation, it’s all ok now
Download again.

JWT Authentication for WP-API – 1.2.6
Nextend Social Login – 3.0.20

I can check the whole flow again to see if I have left something out … otherwise it is to be verified …

@sawasblog

Very strange, I get the json answer, as you can see from the image.

https://pasteboard.co/ITHnv9z.png

Is the NSL plugin properly configured for Facebook?

• This reply was modified 5 years ago by Alfio Piccione.

@sawasblog

The answer he gets is an HTML page while you should have a json.
Could you show me how you send the request?

@sawasblog

Sorry, little mistake.
Download the plugin again.
Remember that the login request is a POST request

Hi @sawasblog and @jwasily

I made a small plugin that through the use of NSL and JWT plugins, implements a social login via REST Api.
Warning: Correct operation assumes that the two plugins are configured correctly as indicated in the respective documentation.

The plugin merely implements the flow to be able to log external apps via social login (facebook and google) or through native login (user and password).

By properly activating and configuring JWT, every WordPress REST endpoit is protected. Any unprotected endpints can be run using the “sl_extended_no_auth_request” filter.

you can download the plugin for free using the discount code: sljwtfree

here is the link to the plugin
you will also find a PDF in English explaining how to use it.

I hope it helps.

@jwasily

I understand,
If you give me some time I can create a working plugin that provides the social login “google, facebook”, and the native login with user and pass.
I will also give you directions on how to test it.
However, this requires a correct configuration of the JWT and NSL plugins