tbenyon

Hey @jjepson,

Thanks for taking the time to do this.

Apologies to both you and @tomtom7 – life is busy at the moment so struggling to get round to integrate this.

Will try and have a look at this this morning but please don’t hesitate to keep chasing.

Thanks,

Tom

Hey Tom,

Let me see what I can do. Can’t make any promises but I will keep you up to date. I welcome you to check in and chase to see how I’m getting on over the next few weeks – I won’t think it’s rude.

If I deliver in four weeks I’ll let you buy me a beer to say thank you 🙂

Tom

Hey Tom,

Really glad you like it. If you wouldn’t mind taking the time to write a one line review I’d be very grateful.

Moving forward, I’ll add this to my backlog of features for now. Do you have a deadline of when this would be useful? Can’t make promises but it may sway my timeline.

Thanks,

Tom

Hi @agentmishra,

I just tested that ID you sent and it does appear to work.

If you use the version of the plugin that I shared with you before and add the below code to your functions.php file in your active theme then you should find it is working.

function myExlogHashAuthenticator($password, $hashFromDatabase) {
    $hmacHashFromPassword = hash_hmac('sha256', $password, '0ee04f60e6f20d6e369ead803e66d46c5cc9ef0c39a97273c4e93e6f876f4710');
    return password_verify($hmacHashFromPassword, $hashFromDatabase);
}
add_filter('exlog_hook_filter_authenticate_hash', 'myExlogHashAuthenticator', 10, 2);

If you can verify this is working for you I will get this change into the next plugin update.

Thanks,

Tom

Hey Tom,

You’re all over this yourself – love it! 🙂

Just wanted you to know that I’m not ignoring you and I’m going to look at your changes now.

Tom

Thanks for the review @agentmishra 🙂

Hey @agentmishra,

I’ve made some progress with this.

I’ve created the feature that will allow you to add your own custom authentication checking. The hook gives you:
– the password that the user typed in
– the hash from the database

It then allows you to check to see if that password is valid for that hash.

What I haven’t been able to get working is to make this work with Blestas hashing method.

The code that you will need to add to your functions.php file will look something like this:

function myExlogHashAuthenticator($password, $hashFromDatabase) {
    $hmacHashFromPassword = hash_hmac('sha256', $password, '?????????????');
    $resultAfterBcrypt = password_verify($hmacHashFromPassword, $hashFromDatabase);
    return $resultAfterBcrypt;
}
add_filter('exlog_hook_filter_authenticate_hash', 'myExlogHashAuthenticator', 10, 2);

However I do not know what the key that needs passing into the hash_hmac function. You can see I’ve currently added question marks in there.

This is something you’ll have to check with Blesta support.

I have not yet published the code that will make this code work but I thought you might like to start your enquiry with Blesta sooner rather than later.

If you wanted to do some initial testing with this feature before I release it, you can find the code here:
https://github.com/tbenyon/wordpress_external_login_plugin/tree/hashhook

I won’t mark this as resolved until I publish the feature in the next release.

Thanks,

Tom

Hey @geckonet,

I have just tested this and it is working completely as expected my end using 1.7.1 and 5.2.1.

Once you change the setting in the plugin to make that user role blocked you should get an error next time you try to login that says “You are not allowed access”.

In case you’re interested and technically minded you can see the logic for this feature in this file:
login/authenticate.php

        $block_access_due_to_role = true;
        foreach ($roles as $role) {
            if ($role != EXLOG_ROLE_BLOCK_VALUE) {
                $block_access_due_to_role = false;
            }
        }

        // If a user was found
        if ($response) {

            // If role is blocking user access
            if ($block_access_due_to_role) {
                $user = new WP_Error('denied', __("You are not allowed access"));

Are you sure you’ve written the role to be blocked in the same CaSe as it is in the database?

To help you diagnose further you could modify the snippet of code I shared with you above to the following and then look at your php error logs to see what it is doing:

$roles = exlog_map_role($response['role']);


$block_access_due_to_role = true;

error_log('---------EXLOG: STARTING ROLE CHECKING---------');

error_log('---EXLOG: ROLES:');

error_log(var_export($roles, true));

foreach ($roles as $role) {

    error_log('-----EXLOG: ROLE:');

    error_log(var_export($role, true));

    error_log('-----EXLOG: CHECK:');

    error_log(var_export(EXLOG_ROLE_BLOCK_VALUE, true));

    error_log('-----EXLOG: ARE THEY NOT EQUAL?:');

    error_log(var_export($role != EXLOG_ROLE_BLOCK_VALUE, true));

    if ($role != EXLOG_ROLE_BLOCK_VALUE) {

        $block_access_due_to_role = false;

    }

}


error_log('-----EXLOG: FINAL - Should we block em?!');
error_log(var_export($block_access_due_to_role, true));
error_log('---------EXLOG: END ROLE CHECKING---------');

// If a user was found
if ($response) {

This shows in my error logs when I do NOT have a blocked role set in the external database:

[15-Jun-2019 13:15:14 UTC] ---------EXLOG: STARTING ROLE CHECKING---------
[15-Jun-2019 13:15:14 UTC] ---EXLOG: ROLES:
[15-Jun-2019 13:15:14 UTC] array (
  0 => 'administrator',
)
[15-Jun-2019 13:15:14 UTC] -----EXLOG: ROLE:
[15-Jun-2019 13:15:14 UTC] 'administrator'
[15-Jun-2019 13:15:14 UTC] -----EXLOG: CHECK:
[15-Jun-2019 13:15:14 UTC] 'exlog_block'
[15-Jun-2019 13:15:14 UTC] -----EXLOG: ARE THEY NOT EQUAL?:
[15-Jun-2019 13:15:14 UTC] true
[15-Jun-2019 13:15:14 UTC] -----EXLOG: FINAL - Should we block em?!
[15-Jun-2019 13:15:14 UTC] false
[15-Jun-2019 13:15:14 UTC] ---------EXLOG: END ROLE CHECKING---------

This shows in my error logs when I do NOT have a blocked role set in the external database:

[15-Jun-2019 13:17:02 UTC] ---------EXLOG: STARTING ROLE CHECKING---------
[15-Jun-2019 13:17:02 UTC] ---EXLOG: ROLES:
[15-Jun-2019 13:17:02 UTC] array (
  0 => 'exlog_block',
)
[15-Jun-2019 13:17:02 UTC] -----EXLOG: ROLE:
[15-Jun-2019 13:17:02 UTC] 'exlog_block'
[15-Jun-2019 13:17:02 UTC] -----EXLOG: CHECK:
[15-Jun-2019 13:17:02 UTC] 'exlog_block'
[15-Jun-2019 13:17:02 UTC] -----EXLOG: ARE THEY NOT EQUAL?:
[15-Jun-2019 13:17:02 UTC] false
[15-Jun-2019 13:17:02 UTC] -----EXLOG: FINAL - Should we block em?!
[15-Jun-2019 13:17:02 UTC] true
[15-Jun-2019 13:17:02 UTC] ---------EXLOG: END ROLE CHECKING---------

Tom