[TYPO3-english] "Securelink" for felogin

[Markus Klein]

Hi!

I would suggest to create an extension/custom PHP code that is called when the magic URL is called, which then logs the user in and redirects to a destination page.


// enforce session so we get a FE cookie, otherwise autologin does not work (TYPO3 6.2.5+)
$GLOBALS['TSFE']->fe_user->setAndSaveSessionData('dummy_thing', true);
$GLOBALS['TSFE']->fe_user->createUserSession($feuserRecordArray);
HttpUtility::redirect($destinationUrl);

Kind regards
Markus

------------------------------------------------------------
Markus Klein
TYPO3 CMS Core Team Member

TYPO3 .... inspiring people to share!
Get involved: typo3.org
> -----Original Message-----
> From: typo3-english-bounces at lists.typo3.org [mailto:typo3-english-
> bounces at lists.typo3.org] On Behalf Of Urs Braem
> Sent: Thursday, April 20, 2017 10:08 AM
> To: typo3-english at lists.typo3.org
> Subject: [TYPO3-english] "Securelink" for felogin
> 
> Hi
> 
> I would like to allow an fe login via an URL, so that the login mask could be
> bypassed.
> The concerned user group has only very basic privileges, so it's not critical
> content.
> 
> The simplest way would be to simply pass the params via GET and
> prepopulate the login mask.
> But that's quite a no-go.
> 
> A so-called "secure link" could be a viable alternative, which is actually just a
> string that's being checked for plausibility and then grants fe user privileges.
> 
> Is there an existing extension or approach for that, granting fe user access
> programmatically via URL / GET / REST?
> 
> In TYPO3 7.x
> 
> Cheers
> URs
> 
> _______________________________________________
> TYPO3-english mailing list
> TYPO3-english at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english