1 time authentication for iDashboard

[leram84]

I have soooo many questions about that second screen shot lol. Did you fork muximux or idashboard or something? make it yourself? I'm doing something very similar to you (with iDashboard). I have everything up and running (though im still trying to pick the best service to handle my blog (wanted tumblr cause it's easy, but the lack of ssl makes it impossible to iframe) Also trying to get my "help" page to have a live chat with me through a slack channel, but i need to have some kind of authentication for that to work so i know who im talking to. so i was thinking about adding it to the root domain, and have everything else be unlocked... not really sure how i want to handle it yet, but my question for you (other than to see if you're willing to share some of the programs you're using lol) is, is there a way to get plex authentication for idashboard's guest page (the root page) and have it automatically log into all the plex services (for me that would be plex, plexrequests.net, and maybe plexpy if i decide to give guest access to that)?

[hjone72]

Hi,

I am using muximux's great software to iframe PlexAuth. You can see the commit here.

Happy to share what I am using, most of it has been modified and I'd recommend a little programming knowledge to get it all going. Checking out some of the projects I've forked on GitHub gives you a pretty good idea.

For my blog I'm using GetGrav with a custom Theme to make it Plexy. I've also modified the 'Admin' and 'Login' plugin to give it an SSO feel (No credentials are required but you still need to click 'Login').

You absolutely could make use of PlexAuth for your guest page on iDashboard! You could either simply add a auth_request module to your nginx directive for iDashboard or de-serialize the PlexAuth class and check PlexAuth->getAuth [ True | False ]. There are many other ways but those two are probably the easiest.

I haven't got any live chat systems going but I am using Bumby-Booby as my helpdesk. I've modified it slightly for PlexAuth SSO.

SSO into other services as long as they are open source should be possible for just about anything... Plex uses the browsers local storage. I believe the only way to insert stuff here is using JavaScript... I haven't done this yet. But! If you want to take it on board. Simple add myPlexAccessToken to the local storage of your plex domain. ie plex.domain.com.

PlexRequests.net - Very doable but again I haven't done it yet.

PlexPy - You'd have to use my fork of plexpy or make similar modifications that I've done to your plexpy and it will be full SSO.

Hope that answers all your questions. :)

[leram84]

Wow, sorry i missed this! Im not sure why i didn't get notified. Thank you for such a detailed response!

The blog is probably the last thing ill add, so ill definitely check out getgrav when i do. Im not a programer, (more of a scavenger lol) but i think i might be able to get PAuth working with the blog when i get to it. As for the rest, when you say sso, do you just mean using plexauth for each of those services? or do you actually mean sign in once to ONE of them and you are automatically signed into all, because the latter is what im trying to accomplish and i don't think it's currently possible with idashboard.

Also, i had kind of a crazy thought, but could this project be integrated with something like lastpass (or some open source password manager, like keypass)? No idea what that would involve, but wouldn't that basically let you integrate plexauth into... everything? Would be pretty cool to have a bunch of services like hipchat, google calendar, etc in your idashboard/muximux page and only have to log in once.

Anyway, thanks again for sharing, its much appreciated.

[hjone72]

As for the rest, when you say sso, do you just mean using plexauth for each of those services? or do you actually mean sign in once to ONE of them and you are automatically signed into all, because the latter is what im trying to accomplish and i don't think it's currently possible with idashboard.
It's kinda one in the same really.

Some services don't support multiple users (SickRage, CouchPotato, MyLar), for these services I've disabled authentication but set the auth_request in nginx. This means that for a user to access any of those services they would need to already be authenticated against PlexAuth.
Services like PlexPy, ComicStreamer and Bumpy-Booby, which support multiple users, will automatically log you in when you first visit the site.

Scenario:

1. User (bobby323) navigates to SickRage.com, sickrage is protected by PlexAuth. Bobby323 is redirected to PlexAuth and logs in, PlexAuth redirects bobby323 back to SickRage and now allows them to access SickRage. Bobby323 now wishes to view PlexPy, they have already authenticated against PlexAuth once. When visiting PlexPy they will automatically be logged in as themselves. All future sites bobby323 visits will automatically allow sign them in and allow them to visit.
2. User (leecher21) navigates to SickRage.com, leecher21 is not allowed to access sickrage. leecher21 is denied access.

Hope this helps explain how my setup works and how PlexAuth works... :)

Also, i had kind of a crazy thought, but could this project be integrated with something like lastpass (or some open source password manager, like keypass)? No idea what that would involve, but wouldn't that basically let you integrate plexauth into... everything? Would be pretty cool to have a bunch of services like hipchat, google calendar, etc in your idashboard/muximux page and only have to log in once.

Hmmm not sure how this one would work. Probably a bit beyond my skills.

Anyway, thanks again for sharing, its much appreciated.

No worries. Let me know if you have any further questions.

[leram84]

WOW! this is so much better than i thought! Yeah, i am definitely going to be using this. Well its currently a little over my head, but im relatively confident i can stack overflow my way through it lol. though im sure ill also take you up on your offer to help at some point :)

oh, one thing i should ask before i start though... my nginx server is running on windows. that shouldn't cause any issues should it?

[hjone72]

I haven't tested it specifically on Windows. However, as long as you have the nginx auth_request module in your build then it should be fine. Should be fine.

Please report back with your progress!

Hi hjone72,

In June 2016 you published screen shots on the Plex forum about your user subscribe screens and sign-up form.Would it be possible to share your code? If not can you give me a better understanding of how you achieved this with the API ? I would really appreciate some guidance... thanks for Plex auth struggled a bit but looks like I got it going !

[hjone72]

Hi @Bluejuice1001,
I'll post the invite and join page in another repo. They are a bit specific to my setup but should hopefully point you in the right direction. You'll also need to create some sort of DB. I'll put a few more details in the repo when I post it. :)

[hjone72]

@Bluejuice1001, I've created the new repo. https://github.com/hjone72/PlexAuth_Pages

Hope it works for you 👍

Thanks a mil, I'll check it out

[leram84]

@hjone72 What are you using for audiobooks? Anything good? I'm getting tired of waiting for plex :(

[hjone72]

@leram84, I'm making use of popeen's subsonic. I've forked his project and made a few small changes so that it accepts Plex credentials. Its not single sign on but it is same sign on, which was good enough for me.

[leram84]

Man that looks really promising! Lack of ios support is the one major bummer. I use android but most of my family is ios, and if im just using it for me and not sharing, theres not a lot of incentive to switch from an offline android app... yeah, thats a lie, im definitely looking into this :) thanks for the lead!

[hjone72]

Yeah it's far from perfect but unfortunately I haven't been able to find anything else. If you come across something be sure to let me know!

[leram84]

Definitely! plex grade audiobook management is my white whale