logging in from a different context

☆ A M B ☆
450 Posts

jrotering Reply #1, 14 years, 3 months ago

I have a secure domain with a separate context where I am logging a user in as 'userx'. I then want them to be able to access some resources on my 'web' context that require membership in a user group that 'userx' is a member of.

However, the problem seems to be that even though the user is logged in as 'userx' in my 'secure' context, they are still 'anonymous' in my web context.

How would I (through snippet API code) get the 'web' context to recognize that the user has logged in & is no longer anonymous?

5,888 Posts

Bruno17 Reply #2, 14 years, 3 months ago

I think you can a user programmatically log in to a context by

$user->addSessionContext('web');

-------------------------------

you can buy me a beer, if you like MIGX

http://webcmsolutions.de/migx.html

Thanks!

☆ A M B ☆
450 Posts

jrotering Reply #3, 14 years, 3 months ago

I've tried using addSessionContext, and it seems like it works, but... the unauthorized pages are still unauthorized.

One thing I'm seeing is that there are session vars for both user 0 and user 35 (the user I'm logging them in as).

modx.user.0.attributes:Array

modx.user.0.resourceGroups:Array

modx.user.contextTokens:Array

modx.secure.user.token:modx4f2c0964aac3b1.13091856_354fd606c5e50737.21839180

modx.secure.session.cookie.lifetime:0

modx.user.35.attributes:Array

modx.user.35.resourceGroups:Array

modx.web.user.token:modx4f2c0964aac3b1.13091856_354fd606d44af500.11083884

modx.user.35.userGroups:Array

modx.user.35.userGroupNames:Array

MODX Staff
10,725 Posts

opengeek Reply #4, 14 years, 3 months ago

This will ONLY work if web and secure are the same domain (or subdomains of the same domain and you have session cookies configured to support that). Is this the case here?

Jason Coward
Chief Architect @ MODX
http://www.jasoncoward.com | http://twitter.com/drumshaman | https://github.com/opengeek

☆ A M B ☆
450 Posts

jrotering Reply #5, 14 years, 3 months ago

They ARE subdomains of the same domain.

I almost surely do not "have session cookies configured to support that". What steps do I need to follow to do so?

☆ A M B ☆
450 Posts

jrotering Reply #6, 14 years, 3 months ago

I found what I needed here:
http://rtfm.modx.com/display/revolution20/session_cookie_domain

and I think I solved my problem!

MODX Staff
10,725 Posts

opengeek Reply #7, 14 years, 3 months ago

Great! Let us know if you have any other issues...

Jason Coward
Chief Architect @ MODX
http://www.jasoncoward.com | http://twitter.com/drumshaman | https://github.com/opengeek