Skip to main content

Questions tagged [authentication-authorization]

Use it for the user authentication/authorization on Drupal core or third-party modules.

Filter by
Sorted by
Tagged with
17 votes
2 answers
26k views

Understanding Drupal's session management and user authentication

I have a requirement to replace the default user authentication with the authentication of a central server, i.e., the SSO server. By debugging Drupal, I learned that all the session management ...
AjitS's user avatar
  • 10.9k
15 votes
2 answers
540 views

How to make an "Add more logins" similar to Stackoverflow?

I am using OpenID Selector module to integrate OpenID logins to my website; the same service used by Stackoverflow for login/registration. However, how can I add an option to "Add more logins" like ...
niksmac's user avatar
  • 7,692
9 votes
2 answers
5k views

How do I configure the Services OAuth sub-module?

The Services module is about to release its new 3.0 version for both D6 & D7. There's an OAuth sub-module to Services that adds a new OAuth UI within the Services configuration UI. Does anyone ...
Blake Senftner's user avatar
8 votes
1 answer
1k views

Drupal Services OAuth

I have been working on this issue for a couple weeks now, and I can't find a solution for the life of me. The fact that I have found no decent documentation (on Drupal's website, or anywhere else) is ...
tynor's user avatar
  • 81
7 votes
2 answers
1k views

Drupal 7 and Open ID

How does this Open ID module work in Drupal 7? I would expect something more or less the way StackOverflow and all these StackExchange websites work: you pick up your logging provider, like Google or ...
Marcos Buarque's user avatar
6 votes
1 answer
3k views

Drupal reuses its hash salt

The instructions in default.settings.php say This variable will be set to a random value by the installer. All one-time login links will be invalidated if the value is changed. Note that if ...
beth's user avatar
  • 9,087
6 votes
1 answer
1k views

Authenticate using OAuth

I'm working on wrapping my mind around decoupled Drupal 8 while using an AngularJS app for the frontend. What I am trying to do is to allow a user to authenticate with my D8 site using their username ...
lukedekker's user avatar
  • 1,013
6 votes
4 answers
5k views

How can I users to register with their email only?

I need to force users to register with just their email. I cannot use the Email Registration module, which still sets the username basing on the user name part of the email; in case of conflicts with ...
6 votes
1 answer
295 views

What security issues are involved with cross-domain logons using OpenID?

I want to implement cross-domain logons for 3 sites. Is OpenID the best tool for protecting my site and users?
palbakulich's user avatar
  • 1,367
6 votes
1 answer
956 views

How to force openid login from a single provider in Drupal 7?

So with the current Drupal 7's OpenID module, one must click on the "OpenID" on the main page, which the user then enter the url of the OpenID provider to link up to. Assuming I know exactly what ...
Tinera's user avatar
  • 61
6 votes
3 answers
1k views

Simple OAuth + JSONapi response when token is expired - Decoupled

We're using the 'Simple OAuth' and 'jsonapi' modules for the front end authentication in Angular of our decoupled Drupal project. We've noticed that when the user credentials are correct but the ...
M M's user avatar
  • 103
6 votes
2 answers
10k views

Drupal Authentication with ActiveDirectory

I'm trying to make Drupal work with ActiveDirectory just for authentication. I'm using Lightweight Directory Access Protocol. I always get this message: Warning: ldap_search(): Search: No such ...
Narazana's user avatar
  • 161
6 votes
1 answer
560 views

Automated login with LDAP always returns error

I have successfully setup LDAP module to authenticate users (and create new users). This is done through manual login form. Now I'm trying to enable automated single sign-on, but with no luck. I ...
Dubya's user avatar
  • 111
5 votes
1 answer
646 views

Forcing OpenID login instead of Drupal own authentication

Is there a way to force the users to use OpenID (e.g. Google, Facebook, Twitter) and not use Drupal's internal authentication?
alexus's user avatar
  • 332
5 votes
1 answer
3k views

How to integrate properly Kerberos based SSO in Drupal 7

I'm trying to install Drupal with Single Sign On over Active Directory. My customer does not have any SSO suite like CAS, and their general recommendation are to use Kerberos (or NTLM as a second ...
Jean-Rémy Revy's user avatar
5 votes
1 answer
5k views

Drupal 7 Single Sign On possibilities with the Domain Access Module

The background: We (currently) have 2000 domain names pointed at a single IP. Drupal inherently has the ability to use multisite, but for our particular Drupal 7 install we use a module named Domain ...
ehime's user avatar
  • 181
4 votes
2 answers
2k views

Login shared between subdomains

If I should allow users to log in using the same username/password, what should I consider when choosing between the following solutions? Install, and use Bakery Single Sign-On System on the main ...
apaderno's user avatar
  • 97.5k
4 votes
1 answer
705 views

How do you change the LDAP DN for a user?

We are using LDAP integration on a Drupal 6 system (with the "LDAP authentication" module). During initial log-in, the user account will be created and the DN (Distinguished Name) for that user will ...
Palmin's user avatar
  • 383
4 votes
2 answers
1k views

Facebook OpenID Selector [closed]

I work with the OpenID Selector; everything is OK, but nothing happens when I click on "Facebook." I work with the Drupal for Facebook module; this works fine, but with the OpenID Selector just it's ...
Sami Ghname's user avatar
4 votes
2 answers
2k views

Drupal 7 Twitter

I have a requirement where I need to tweet through many tweet accounts for which I have username and password. I have read many tutorials on oauth, but I am still confused about using this for ...
ayush's user avatar
  • 552
4 votes
2 answers
5k views

How to install oAuth using PHP 7 and PECL OAuth library?

I am [unsucessfully] trying to enable the Twitter module on a Drupal 8 site that is using PHP 7 on ubuntu. The Twitter module requries oAuth to work and oAuth requires the PECL OAuth library. If I ...
brittany_p's user avatar
4 votes
2 answers
3k views

Is there an example OAuth2 client module anywhere? [closed]

Similar to this post and this request, I'm creating a OAuth client in Drupal 7 but using OAuth2.0. There's an OAuth2 module with an unpublished Drupal 7 version that I've toyed with, but it's geared ...
selfsimilar's user avatar
4 votes
1 answer
614 views

Drupal 6.x vs 7.x for Multiple Domains and LDAP

We're looking at using Drupal for our public sites, which will have: multiple primary domains multiple sub-domains We will need to allow our users to authenticate against LDAP to get different ...
KM.'s user avatar
  • 759
4 votes
2 answers
202 views

Create a block Most popular content using google analytics

Can anyone explain how to create a block of most popular contents using google analytics. I know about the modules Google Analystics Statistics and Most Popular but there is no good documentation ...
Nabil's user avatar
  • 341
4 votes
1 answer
2k views

Magento + Drupal SSO (Single Sign On) [closed]

We are looking to build a new website which would make use of 2 web applications: Drupal and Magento. Drupal will be used for corporate website while Magento will serve as a web shop. One of the ...
Kenny's user avatar
  • 171
4 votes
1 answer
825 views

Integration of Microsoft Exchange server with Drupal

I am using Drupal 7. I would like to integrate Microsoft Exchange server with my Drupal site, so that I can login with the credentials of Exchange server and can also integrate with other features of ...
mohit_rocks's user avatar
  • 3,966
4 votes
2 answers
449 views

How to implement stateless authentication

I'm having a big problem with Drupal 8, I want Drupal to trust a downstream reverse proxy that performs authentication against a third party provider, then passes a JWT in a X_ID_TOKEN header. As I ...
Guerric P's user avatar
4 votes
0 answers
590 views

Single signon with Microsoft Outlook Webmail [closed]

I am using Drupal 7. I wanted to create Intranet pages where staff/employees can log in with their credentials. Is there any way so that they can log in with their https://login.microsoftonline.com/ ...
Vidushi's user avatar
  • 419
4 votes
1 answer
730 views

Can't login using OpenId (core) and Google profile

I'm using the OpenId module (included in core v7) but can't link an OpenId to an existing account. Every time I try to add it an error occurs: Sorry, that is not a valid OpenID. Ensure you have ...
Bart's user avatar
  • 6,934
4 votes
3 answers
491 views

What is the correct way of logging in through services from android? [closed]

I currently have an app in development where I use services 3 on drupal 7 to login to my site. I do this by simply passing in the username and password parameters to a json object and use httppost to ...
7wonders's user avatar
  • 3,057
3 votes
2 answers
532 views

Should Drupal 6 be considered insecure?

After reading the post about linkedin on IT security and this issue I would think that having a default Drupal 6 installation without, for example, the phpass module should be considered quite ...
mojzis's user avatar
  • 2,501
3 votes
6 answers
2k views

Oauth and Facebook

Is there a way to make users auto register to a Drupal site if they are logged in to Facebook? I know Drupal for Facebook and Facebook - Auth but they are using tables, and not user profiles.
amirash's user avatar
  • 291
3 votes
2 answers
1k views

User login API for social login from mobile apps

I have installed HybridAuth module for social login (Only Facebook & Google) and It is working fine. I need the same functionality for mobile apps. Like the user can able to login using the ...
vgsbharathi's user avatar
3 votes
1 answer
2k views

Can we customize user login block in Hybridauth module

Can we customize user login block in Hybridauth module in our custom theme? Like writing block-hybridauth-hybridauth.tpl.php. I need to customize the way of output. Instead of the Sign In icon which ...
Kiran Tej's user avatar
  • 190
3 votes
2 answers
800 views

What are the differences between the various OpenID widgets available?

There seems to be several different widgets for providing easer registration and login. I'm curious how they work and what the difference between them are? For example, there is the OpenID selector, ...
Adam S's user avatar
  • 5,031
3 votes
1 answer
1k views

Authentication for iCal feeds

I have a calendar feed (using the Drupal Calendar module) on a site and I'd like to add this calendar to Google Calendar. I have this working for a publicly accessible calendar and it works fine. The ...
Mad Scientist's user avatar
3 votes
3 answers
3k views

AccessDeniedHttpException on a route with _access: TRUE

In my custom module I have a few "publication" routes that do not need any kind of authentication. Months ago I learnt that I could achieve this with the following requirements in routing....
Francesco Marchetti-Stasi's user avatar
3 votes
1 answer
854 views

Using oauth_common in a module to authenticate with a web service?

I'm wanting to use my Drupal 7 site to communicate with an external API that must be authenticated via 3-legged OAuth. It seems there's a lot of documentation around about using Drupal as the OAuth ...
aendra's user avatar
  • 1,755
3 votes
4 answers
3k views

SMS for login to website

Is there any way for sending code by SMS when the user login to the website "OTP", I want my website more security for login, the users have to type Username,password, SMS code. Thanks for your ...
mabawa's user avatar
  • 39
3 votes
1 answer
1k views

Letting users login with facebook to an existing account

My client wants to add FaceBook integration into an existing site. I've successfully setup fboauth and openid_selector. New accounts can login without an issue. However, we liked to let an exiting ...
Rick's user avatar
  • 2,984
3 votes
2 answers
621 views

How to force users to log in with OAuth

My site forces users to log in with a specific OAuth provider for some reasons. Users should not be able to log in using their username and password pairs. Only the site managers can have accounts ...
Chungmin Lee's user avatar
3 votes
1 answer
323 views

Login from one Drupal instance on another Drupal instance

I'm working on a project that has some unconventional requirements. Basically, I have two sites, each one with an individual Drupal installation and instance. The main site (I'll call it "master") ...
julioneander's user avatar
3 votes
1 answer
803 views

Redirecting to external validation page using oauth with drupal_http_request()

I'm working on a module to integrate with the Piryx API, and per the OAuth documentation, I should be redirected to an external page where the user can allow access to my application. The problem is ...
wonder95's user avatar
  • 1,201
3 votes
1 answer
707 views

How to obtain Drupal session cookie via an XMLRPC request?

I would like to implement single sign-on to Drupal and other site (not PHP) via xmlrpc. Is there a way to make an xmlrpc call with user name & password and in return obtain information on success ...
Evgeny's user avatar
  • 131
3 votes
1 answer
136 views

Check for active/qualified session in EventSubscriber, destroy session and cookies if not

I have an application that has a custom SSO with a third party service. We are porting Drupal 7 code to Drupal 10 to continue the functionality. Previously we had a hook_init function that did the ...
Kevin's user avatar
  • 27.9k
3 votes
1 answer
684 views

Using OAuth2 on non-REST endpoints

I have a custom module which includes a ControllerBase. The controller has a content() function that returns a JsonResponse(). The code for this function returns a complete list of a certain entity ...
saramm1's user avatar
  • 727
3 votes
2 answers
3k views

Theming login page--user--login.tpl.php

I'm trying to theme the login user page and it seems that I'm missing something and I can't figure out what it is. here is what I did: I've added this code to my template.php: function ...
Kitty77's user avatar
  • 31
3 votes
3 answers
1k views

Integration of two sites (one is Drupal-based, the other isn't)

I'm trying to integrate two sites (one is Drupal-based, and the other isn't), and I need single sign-on. How can I realize it? I have sites on different domains.
Masha's user avatar
  • 31
3 votes
0 answers
301 views

How can I convert oauth2_token.value back to a Bearer token in simple_oauth?

I'm working on a headless Drupal 8 API that offers direct login links via email. For users who forgot their passwords or were invited but have never logged in, it's safe to just reset their password. ...
E.A.T's user avatar
  • 384
3 votes
0 answers
395 views

How to implement SSO with Oauth2 to login users from another site?

So, I apologize in advance as I'm only now getting familiar with all the Oauth2 terminology. I have an existing Drupal 7 site with its own active user base. The organization I support has recently ...
nizz0k's user avatar
  • 1,172

1
2 3 4 5
8