WordPress integration

[IQ2022]

1- wordpress user integration
if not
2- signup/login within wordpress/ webpage as an API?
3- Send alerts to (specified) channels once a new post is published.

[marceloschmidt]

Someone with WordPress knowledge can take this?

[nonsintetic]

I know quite a bit about Wordpress, but not a lot about meteor. I can try and pitch in on the WP part once a general approach has been laid out by someone who knows both.

[engelgabriel]

@nonsintetic I think we need your help here indeed.

1. We need to find a good WordPress oAuth or SAML plugin. Do you know any?
2. Do you know how to write WP plugins? We can give you the Rest URLs to send the alerts to.

[nonsintetic]

I can write plugins, sending alerts to a REST api should be easy as pie. I'm guessing we could send alerts for things like new post, new comment, new user registration, maybe even admin stuff such as when Wordpress is auto-updated.

[engelgabriel]

That's great. We are working on the integration points. I'll get your a doc with the API to test. If you can help, it would be awesome!!!!

[nonsintetic]

Good, I'll make something as soon as I get it.

Regarding SAML plugins, the only one available that doesn't use an external SaS service is https://wordpress.org/plugins/saml-20-single-sign-on/, it's basically an implementation of simplesamlphp (https://simplesamlphp.org/). It makes Wordpress a SAML SP, it works, but it's kind of hacked-together if you ask me.

The way I see it is: what would be useful is to have a plugin that makes Wordpress an IdP instead and use Rocket Chat as a SP. That way you can just keep using the Wordpress login functions, login screen and database for storage like before, just add a plugin for RC. There isn't one available at this moment, but one could be written using simplesamlphp without too much hassle.

Otherwise, migrating to a different accounts system to use a chat system would be overkill for most people, especially since most of them already have users signed up to their WP site.

[engelgabriel]

@nonsintetic I think we are saying the same thing. I don't want people to have to migrate to a different accounts system. We want to keep WP and the Identity Provider, either via SAML or oAuth, and Racket.Chat will just use our generic packages to login using those credential.. as you can with Facebook, LinkdeIn, GitHub, etc on our https://demo.rocket.chat server.

So how should we start?

[engelgabriel]

Shall we use this?

https://wordpress.org/plugins/oauth2-provider/

[nonsintetic]

I have that plugin installed on my test server and it works fine, all it really needs is a rocket.chat plugin very similar to the Gitlab one (a generic oAuth plugin). I'm not sure how Gitlab works, but I imagine it's just the links that differ.

If you want i can set up a public Wordpress install with that plugin enabled and give you guys the keys so you can test it out.