deuxhuithuit/craft-agency-auth

Adds SSO login in the cp with Google

1.1.2 2024-02-08 21:36 UTC

Requires

• php: 8.1.*|8.2.*|8.3.*
• craftcms/cms: ^4.0.0

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3.22

MIT

• Deux Huit Huit

• admin
• Authentication
• SSO
• control panel

README

This plugin allows us to log in the control panel with our Google Account.

Note

This is meant to be internally used by Deux Huit Huit and might not do what you want. Pull Requests are welcome :)

Create and save the credentials

1. Create OAuth client ID here
2. Application type to Web application
3. Name the credentials with the client's project name
4. Add the authorized redirect URIs according to your setup. e.g. https://example.com/actions/agency-auth/callback no language are required.
5. Save the credentials
6. Fill the credentials in the /config/agency-auth.php file
7. Commit the changes

config/agency-auth.php

The possible settings are:

<?php

return [
    '*' => [
        'client_id' => '',
        'client_secret' => '',
        'domain' => '',
        'default_password' => '',
        'photo_volume_handle' => '', // optional
        'photo_folder_name' => '', // optional
    ]
];

src/AgencyAuth.php

This file will prevent the manual login with a password into craft's CP. It will also add js and css into the login page for the oauth2 dialog button.

src/controllers/DialogController.php

This will only redirect the user to the oauth2 dialog.

src/controllers/CallbackController.php

This will handle the oauth2 callback and login the user.

mod_sec

Rule id 930120 does not like the .profile string in Google's response, so make sure to tweak it for your needs.