{"id":21044571,"url":"https://github.com/tripflex/wpu-sso-enhanced","last_synced_at":"2026-04-21T20:04:59.078Z","repository":{"id":147531996,"uuid":"302675887","full_name":"tripflex/wpu-sso-enhanced","owner":"tripflex","description":"WP Ultimo 1.x enhancement for Mercator SSO to support custom domains with recent SameSite=Lax change in Chrome, etc.","archived":false,"fork":false,"pushed_at":"2020-10-09T18:17:55.000Z","size":51,"stargazers_count":1,"open_issues_count":0,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-01-20T17:32:37.287Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tripflex.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-10-09T15:07:03.000Z","updated_at":"2022-08-24T09:41:02.000Z","dependencies_parsed_at":null,"dependency_job_id":"1921bf9b-10ef-4311-b929-1cf73f4569dc","html_url":"https://github.com/tripflex/wpu-sso-enhanced","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tripflex%2Fwpu-sso-enhanced","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tripflex%2Fwpu-sso-enhanced/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tripflex%2Fwpu-sso-enhanced/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tripflex%2Fwpu-sso-enhanced/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tripflex","download_url":"https://codeload.github.com/tripflex/wpu-sso-enhanced/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243489898,"owners_count":20299001,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-19T14:17:37.078Z","updated_at":"2025-12-28T20:15:44.232Z","avatar_url":"https://github.com/tripflex.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# wpu-sso-enhanced\nWP Ultimo 1.x enhancement for Mercator SSO to support custom domains with recent SameSite=Lax change in Chrome, etc.\n\nThis file MUST be placed in the wp-content/mu-plugins/ directory to work correctly.\n\nFunctionality is handled in a few different ways.  If $trigger_on_auth_cookie_set is enabled below, when a user's authentication cookie is set (outside of this code), SSO meta will be generated for that user, stored in the network site user meta including the user's custom domains, site IDs, and SSO expiration (@see $this-\u003ebuild_sso_meta()).\n\nThis is done so that data can not be modified by bad actors in any way.\n\n When the next page is loaded (which normally always happens right after auth cookie is set due to redirect after login), and the cookie is detected (@see $this-\u003echeck_cookie_start_sso()) the nonce will be validated and the SSO meta set above will be pulled to start the SSO flow process.\n \nThe user is then redirected to the custom domain to start the SSO, passing the nonce and user id in query params (ie domain.com/?wpu_sso_me=1234\u0026nonce=XXX), which is then detected in $this-\u003emaybe_process_sso(), where the COOKIE_DOMAIN is configured, and then auth cookie is set, redirecting to next site to do SSO on or if no more sites, redirecting to the main page of the last site SSO processed on.\n \n Alternatively if you set $trigger_on_auth_cookie_set to false below, you will need to trigger this yourself using the \"wpu_sso_me_next_page_load\" or \"wpu_sso_me_now\" actions, passing the user ID as the only argument.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftripflex%2Fwpu-sso-enhanced","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftripflex%2Fwpu-sso-enhanced","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftripflex%2Fwpu-sso-enhanced/lists"}