Oauth 2.0 Log in by WeChat

Questions
1

I’m a new kanboard user from China. I wonder if it’s possible to log in by Wechat account. Maybe this needs to edit in the Oauth2 Plugin’s source code, but I’m not sure. :smiling_face_with_tear:

2

Did you try it? Did it fail?

3

Yes, actually I‘m trying. But I have not succeeded yet. I can only get the code passed by wechat, but I still cannot get the token.

4

I have not succeeded either. I’m using ownCloud as an OAuth2 provider, this usually works like a charm. But unfortunately not with the Kanboard plugin.

  • OAuth link from Kanboard Login page leads to ownCloud login page.
  • After Login to ownCloud, the ownCloud authorize screen is shown.
  • Clicking button Authorize leads back to Kanboard login with error.

I’ll do some more debugging, as soon as possible.

5

My situation is quite similar to yours:

  • The OAuth link on the Kanboard login page redirects to the WeChat login page.

  • After the user authorizes the login, it shows a successful authorization and then returns a link with a code.

Unfortunately, this link with the code redirects to the main page of my domain instead of the Kanboard page after login. I am working on resolving this issue and hope you can succeed soon:)

1 Like
6

Hello, I would like to share a good news with you. I have successfully implemented WeChat authorization login. I tried to edit in the OAuth2 plugin’s source code and some php files in the kanboard basic configuration which related to OAuth, and then I succeeded!

7

I checked the delivery process of the callback URL, client id, secret, authorize URL, token URL, user API URL, scopes, userInfo to make sure they were delivered properly. You can also try to check it out like this, and I wish you success.

8

Great to hear this. But maybe you could share your applied changes?

9

Sure. I list the changes below. Before this, I changed ‘client id’ and ‘client secret’ to ‘app id’ and ‘app secret’, which matches the naming method of WeChat. You may not need this.

  1. /kanboard/plugins/OAuth2/Auth/GenericOAuth2Provider.php

     public function getService()
 {
     if (empty($this->service)) {
         $this->service = $this->oauth->createService(
         $this->getAppId(),
         $this->getAppSecret(),
         'https://my_kanboard_domain.com/?controller=OAuthController&action=handler&plugin=OAuth2',
         $this->getOAuthAuthorizeUrl(),
         $this->getOAuthTokenUrl(),
         $this->getScopes()
     );
 }

 public function getProfile()
 {
     $token = $this->getService()->getAccessToken($this->code);
     $openid = $this->getService()->getOpenId();

  if (DEBUG) {
     $this->logger->debug(__METHOD__.': Got access token: '.(empty($token) ? 'No' : 'Yes'));
     $this->logger->debug(__METHOD__.': Fetch user profile from '.$this->getUserAPiUrl());
 }

 return $this->httpClient->getJson($this->getUserAPiUrl().'?access_token='.$token.'&openid='.$openid);

  2. /kanboard/app/Core/Http/OAuth2.php

    public function getAuthorizationUrl()
{
 $params = array(
     'appid' => $this->appId,
     'redirect_uri' => $this->callbackUrl,
     'response_type' => 'code',
     'scope' => implode(' ', $this->scopes),
     'state' => $this->getState(),
 );

 return $this->authUrl.'?'.http_build_query($params).'#wechat_redirect';
}

public function getOpenId()
{
 if (! empty($this->openid)) {
     return $this->openid;
 }

 return '';
}

public function getAccessToken($code)
{
 if (empty($this->accessToken) && ! empty($code)) {
     $params = array(
         'appid' => $this->appId,
         'secret' => $this->secret,
         'code' => $code,
         'grant_type' => 'authorization_code',
         // 'state' => $this->getState(),
     );

     $response = json_decode($this->httpClient->postForm($this->tokenUrl, $params, array('Accept: application/json')), true);

     $this->tokenType = isset($response['token_type']) ? $response['token_type'] : '';
     $this->openid = isset($response['openid']) ? $response['openid'] : '';
     $this->accessToken = isset($response['access_token']) ? $response['access_token'] : '';
 }

 return $this->accessToken;
}

public function setAccessToken($token, $type = 'bearer', $openid)
{
 $this->accessToken = $token;
 $this->tokenType = $type;
 $this->openid = $openid;
 return $this;
}
2 Likes
10

Thank you! I’ll continue as soon as possible.

11

You’re welcome! Let me know if you have any problem later.