User creation is simple and I have it figured out. What I’m having problems with is the login.

Apparently (and according to WordPress) SWPM is blocking the login.

More details now:

1. I send my app username and password to WordPress by Rest API using node-fetch (GET method).
2. In WordPress I have an Endpoint inside a Custom Plugin (code below).
3. This endpoint retrieves the URI parameters and sends them to wp_signon to sign in.
4. If wp_signon succeeds in logging in, it returns the user’s data. If not, it returns an error array.

This is the custom endpoint en WP:

// Register REST API endpoints
class Login_REST_API_Endpoints {

    /**
     * Register the routes for the objects of the controller.
     */
    public static function register_endpoints() {
        // endpoints will be registered here
        register_rest_route( 'wp', '/login', array(
            'methods' => 'GET',
            'callback' => array( 'Login_REST_API_Endpoints', 'login' ),
			'permission_callback' => '__return_true'
        ) );
    }

    /**
     * @param WP_REST_Request $request Full data about the request.
     * @return WP_Error|WP_REST_Request
     */
	public static function login( $request ) {


		$data = array();
		$data['user_login'] = $request["email"];
		$data['user_password'] =  $request["password"];
		$data['remember'] = true;
		$user = wp_signon( $data, false );

		if ( !is_wp_error($user) ){
			return $user;
		} else {
			return $error = json_encode(array('error' => true));
		}

	}
}
add_action( 'rest_api_init', array( 'Login_REST_API_Endpoints', 'register_endpoints' ) );

So far so good. The problem appears when I activate the SWPM plugin.

I start getting this response (the asterisks are intentional, to hide the real info):

{
	"code": "wp_die",
	"message": "<p>Warning! The Simple Membership plugin cannot process this access request to prevent you from accidentally logging out as WP admin.<\/p><p><a href=\"https:\/\/*********\/wp-admin\/profile.php\" target=\"_blank\">Click here<\/a>to see the profile with which you are logged in in this browser.<\/p><p>In this browser you have connected to the site as an administrator user. First, log out as WP admin and then you will be able to log in as a member.<\/p><p>Alternatively, you can use a different browser (where you are not logged in as an administrator) to test membership access.<\/p><p>Your frequent visitors or members will never see this message. This message is ONLY for the admin user.<\/p>",
	"data": {
		"status": 500
	},
	"additional_errors": []
}

And these are the headers when the error happens (the asterisks are intentional, to hide the real info):

Date: Sat, 11 Feb 2023 02:58:36 GMT
Server: Apache
Set-Cookie: swpm_session=52883ad4e8ad887e7***************; path=/
X-Robots-Tag: noindex
Link: <https://******/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Length: 890
Connection: close
Content-Type: application/json; charset=UTF-8

I already tried:

• Close all sessions.
• Delete cookies and cache.
• Deactivate plugin and activate them one by one.
• Test with different browsers.
• Try with Insomnia.

And nothing works.

The only thing I have noticed is that when SWPM is disabled, the request is successful (code 200).

Could you please give me some idea of what might be going on and how I could fix it?

In use:

• SWPM 4.2.4.
• WP 6.1.1.

I’m using a function my custom plugin to login via an API. The login process is using wp_signon function with nonce (_wpnonce) and redirection. The issue that when I log in with nonce and JetPack plugin active, the function return 0. When I disabled JetPack, it works perfect and return user data.
If I logged in without nonce also it works seven if JetPack active.

I appreciate it in advance if could find the issue to make them both works together.

Regards

Is there a workaround or how can this be fixed?

On Timely Plug in:
ACTION REQUIRED! Please, sign into Timely Network to continue syncing your imported events.

Sign in error code:
All-in-One Event Calendar:
We were unable to Sign you In for Time.ly Network.
Detail: Signin Failed. Please verify your account information and try again.

I am able to sign on to my account on timely.com

Please help!!

https://www.ads-software.com/plugins/all-in-one-event-calendar/

https://www.ads-software.com/plugins/janrain-capture/

I have a test site on Azure and got an error when clicking on the IP tab that the saml-20-single-sign-on\etc is not writable.
Using FileZila, I created the folders and when clicking on the tab the error went way but all I have is:
SAML Identity Provider Settings

Note: A Valid Identity Provider (IdP) must be declared before the site. can use Single-Sign On.

and the Update Options button.

If I click on the button, I get:
SAML Identity Provider Settings
Your changes couldn’t be saved. Is the file writable by the server?

Note: A Valid Identity Provider (IdP) must be declared before the site. can use Single-Sign On.

and the Update Options button.

Any idea what is going on? I changed the permission on the etc folder to 777 via FileZila, not sure if that did anything.

Thanks for your help.

Dan

https://www.ads-software.com/extend/plugins/saml-20-single-sign-on/

The end result would be similar to Shopify https://www.shopify.com/login where users log into their website dashboard from the shopify website login page.

I’m seeing that I’m not the only who’s wanted to do this since there have been a number of other posts about it, but none had a solution.

https://www.ads-software.com/support/topic/auto-login-to-wordpress-when-logged-in-from-another-site?replies=2
https://www.ads-software.com/support/topic/log-into-wp-admin-by-passing-variables-from-another-site?replies=3

Any tips or relevant plugins? Thanks.

Bit of a noobie to WP but have managed to alter one or two things so far!

What I would like to do, is CENTRE ALIGN the ‘Register / Lost Your Password?’ links that appear underneath the Signon box.

I’m happy to go down into the code to do it bur wondered if someone could point me to exactly where I need to go.

Thanks in advance!

Regards
Nicky

This seems to have been asked many times before, but never answered.

I’ve got an existing authentication/authorization scheme in place. I would like to be able to tie in WordPress to use that scheme. So basically, if someone accesses the login page, I’d like to be able to write a plugin that immediately checks my own authentication scheme, logs the person into WordPress automatically, and forwards them on to the admin page.

It doesn’t appear that there are any hooks in the necessary spots for me to do this. Specifically, I need a hook at the top of the login page before any output, so I can redirect properly.

Has anyone done this before or have any ideas?

Thanks.