单点登录从WordPress到媒体维基

I was able to setup SSO (Single sign-on) from WordPress to media wiki, by following these steps:

1. First you need an OAuth 2.0 server, you could implement it your self see details here Run your own OAuth 2.0 Server or the easiest way is to use the WordPress plugin WP Oauth 2.0 server you don\'t have to buy the pro, you can also implement SSO by using the Grant type Authorization codes which comes free.

2. You need OAuth 2.0 client extension installed on your media wiki, the extension can be found here, follow the installation instructions there.

3. Go to WordPress plugin page and activate OAuth server, then navigate to OAuth Server and add a new client, give your client a name and in Redirect URI add the link mention on the media wiki extension page i.e http://your.wiki.domain/path/to/wiki/Special:OAuth2Client/callback, then go to OAuth>clients page where you can see your newly created client, click edit and here you can see clientID and Client secret add this ID and secret in the localSettings.php of your media wiki.

4. Create a page on WordPress and put the following button with your client id in it

   < a href=\\\"https://your-Domain-Where-OAuth-server-is-running.de/oauth/authorize?response_type=code&client_id=YOURCLIENTID&state=RANDOM-STRING&scope=basic\\\">
go to wiki</a>
   don\'t forget to put scope otherwise you will get a media wiki internal error.

5. If everything worked fine then you should automatically go to the media wiki main page after clicking this button from your WordPress. media wiki will show you as logged in. It took me some time to figure it out I hope this helps anyone who comes here.

I followed Ahmad\'s answer above and got part way there. However I had to make a one line source code change and additionally configure the LocalSettings for media wiki as originally posted here: https://www.mediawiki.org/wiki/Topic:Ux1crr4vosyw0tjl

Repeated for convenience:
I finally got it working with these additional steps - editing my LocalSettings.php; xxxx is my website starting with https://

In addition to setting the secret and ID I had to fill in the the configuration parameters with these settings - these are from my site.

$wgOAuth2Client[\'configuration\'][\'authorize_endpoint\'] = \'xxxx/oauth/authorize\'; // Authorization URL

$wgOAuth2Client[\'configuration\'][\'access_token_endpoint\'] = \'xxxx/oauth/token\'; // Token URL

$wgOAuth2Client[\'configuration\'][\'api_endpoint\'] = \'xxxx/oauth/me?access_token=\'; // URL to fetch user JSON

$wgOAuth2Client[\'configuration\'][\'redirect_uri\'] = \'xxxx/mediawiki/index.php?title=Special:OAuth2Client/redirect&returnto=Special%3AUserLogin\';

$wgOAuth2Client[\'configuration\'][\'username\'] = \'user_login\'; // JSON path to username

$wgOAuth2Client[\'configuration\'][\'email\'] = \'user_email\'; // JSON path to email

$wgOAuth2Client[\'configuration\'][\'scopes\'] = \'openid email profile\'; //Permissions

$wgWhitelistRead = array(\\\"Special:OAuth2Client\\\");

Then I also had to make one code change in .../mediawiki/extensions/MW-OAuth2Client/vendors/oauth2-client/src/Provider/AbstractProvider.php

protected function fetchResourceOwnerDetails(AccessToken $token)

After that the plugin worked as expected.

Note on installation of the mediawiki extension I got these composer warnings - I believe they can be safely ignored...

Package guzzle/guzzle is abandoned, you should avoid using it. Use guzzlehttp/guzzle instead.

Package phpunit/phpunit-mock-objects is abandoned, you should avoid using it. No replacement was suggested.

Package satooshi/php-coveralls is abandoned, you should avoid using it. Use php-coveralls/php-coveralls instead.

Also I found this link useful in understanding how to use the wordpress plugin: https://wp-oauth.com/docs/how-to/setup-wp-oauth-server-for-single-sign-on-with-wordpress/

And I found you can just add the OAUTH plugin to wordpress from your site\'s WP admin page - just click the Add Plugins button - or search for \\\"oath\\\" by WP Oauth Server There is no need to get it from their WP OATH website where you can only find the paid version.