Thats ok. ![]()
The only thing that is a bit odd is if you change the font on the forum this setting is not followed through on the rest of the site, thatās fine but as you have linked WordPress (I think) with discourse both have different settings, maybe it would be better to add plugins to discourse so the login to virtualmin is seamless whether it be forum or main site
Do you mean pages like WordPress, documentation, and other site pages outside the forum?
Yes correct, as i was guessing that the rest of the site is produced by something like word press as there is no single login between the shop and the forum
There is actually. What makes you think that there is not?
Not for me, they are 2 different login credentials, that said i didnāt start using the forum until the older system was discontinued, when i tried to login using my user name from the older system, it was not accepted hence on the forum i am jimr1 and on the rest of virtualmin i am jimr
Interesting. We could probably fix it if thatās the case, since for most other users, itās the SSO login.
Do you use the same email address for both? How do you sign in to the forum? It should redirect you to Sign In ā Virtualmin login page.
Tbf Iāll have to look at my notes as there has been no compunction to log in to virtualmin as the pro subscription is billed & paid without any intervention from me
Thereās only one point of authentication (the WordPress site). There is no Discourse authentication page available, it always redirects you to WordPress.
Your jimr user has a Discourse username of jimr1, though I donāt know why/how that would happen (usually a name like this happens when thereās a username conflict because username rules are different for Discourse/WordPress and some previous forum, but I donāt see an obvious conflicting name).
But, this is one user, and you login at one site (virtualmin.com, WordPress). You canāt login at forum.virtualmin.com, as it just redirects.
Oh, actually, you have another user in Discourse, somehow, which explains the conflict. But, I donāt quite understand how it happened. You have two posts, no associated WordPress account (it is named jimr, with a different email address at the same domain as your currently logged in account).
Anyway: There is only one login page for forum and website. It is impossible to login any other way. You logged in with your jimr user in WordPress, and that is associated with the jimr1 user here. I could probably even change the name of the outlier and make your username match the WordPress name, if youād like. Send me a PM if you want me to do that (Iād rename jimr to jimr-old and the current one to jimr and make the Discourse name in WordPress match).
No need to change the name. If itās the same person, you can merge both users and keep all the data.
Just for my information, do you link both the WordPress and this forum by username or by email?
(I understand this is an SSO or OAuth implementation)
I need to implement SSO/OAuth for my Discourse with Joomla at somepoint.
Emails change. Maybe not a problem for folks like us that run severs and control domain names?
A well-designed system should rely only on the user ID, which the user never sees or interacts with directly, as preventing users from changing their username or, even worse, their email address (which is still surprisingly common) is a design flaw and has no place in modern software.
User id, that is the link for your SSO?
Makes sense. Not username or email.
often due to complete loss of a domain - due to theft of the domain or legal recovery delay due to the obstructive/mis-guided procedures of the registrar
it is near impossible to recover - i have one client who has lost data and customers from such - a disaster it has been.
the ability to change both email and username should be acheivable.
Which I can agree with from the perspective of security.
But I can understand this part from the perspective of āuser friendlinessā (hope this expresses it properly).
Its not easy to get the ideal solution if you have to take proper security and other thinks like available options for users into account.
