I have searched extensively, but have not found anything useful. Can anyone offer any advice?
Thank you!
3
-
Automatically creating local users? Please elaborate– LodderCommented May 29, 2015 at 15:46
-
Did you tried looking into the custom plugin code and where it is adding users?– NagarjunCommented May 29, 2015 at 15:49
-
I have created a plugin (which does not have any code to add users) that authenticates with an external REST service using curl. Immediately upon returning the JAuthenticationResponse object from the onUserAuthenticate event, a Joomla user is automatically created in the "Registered" group. This is problematic because it presumably opens the authentication process up to issues like out-of-date passwords and account statuses, since I cannot disable the Joomla authentication plugin (which would lock me out of the back end).– JoelCommented May 29, 2015 at 15:55
Add a comment
|
1 Answer
I've solved this issue.
Instead of worrying about syncing two authentication sources (external + regular Joomla), I did disable the Joomla authentication plugin, and updated my custom plugin to check if the code is being called from the front end or back end, and if back end, handle Joomla logins manually from the #__users table.
The users are still auto-created, but the problem of out-of-sync user accounts is now moot, and non-admin users in Joomla can be cleared automatically every night to prevent bloat.