# Integrate NC with NodeBB forums with this OAuth2 (SSO) plugin for register/login

**URL:** <https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451>\
**Category:** 🏷️ General\
**Created:** [November 19, 2019, 5:01am UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451 "2019-11-19T05:01:38Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [November 19, 2019, 5:01am UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/1 "2019-11-19T05:01:38Z")

</div>

Hello

I was added new nodeBB OAuth2 plugin to login/register through NC instance. Install it with nodeBB ACP.

Regards

---

<div class="post-metadata">

**Author:** ![j-ed](https://help.nextcloud.com/user_avatar/help.nextcloud.com/j-ed/32/7281_2.png) [@j-ed](https://help.nextcloud.com/u/j-ed)\
**Post date:** [November 19, 2019, 1:51pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/2 "2019-11-19T13:51:42Z")

</div>

Sorry, but I don’t understand what you want to tell us. Can you please revise your text a little bit to be more precise.

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [November 19, 2019, 4:02pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/3 "2019-11-19T16:02:18Z")

</div>

I changed a little the title.

I was made a plugin for NodeBB forums, that use Nextcloud as OAuth2 provider. Then users already registered at NC can register/login on any NodeBB forum usin SSO, like with Facebook, Google, etc.

---

<div class="post-metadata">

**Author:** ![j-ed](https://help.nextcloud.com/user_avatar/help.nextcloud.com/j-ed/32/7281_2.png) [@j-ed](https://help.nextcloud.com/u/j-ed)\
**Post date:** [November 19, 2019, 4:07pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/4 "2019-11-19T16:07:47Z")

</div>

👍 That sounds good. I would recommend that you provide a link to your NodeBB plugin so that interested users can find and download it, if required.

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [November 19, 2019, 5:00pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/5 "2019-11-19T17:00:39Z")

</div>

For install there is no need for URL because nodebb admins can install plugins directly inside their ACP (Admin Control Panel).

Anyway, this is the URL:

> **[nodebb-plugin-sso-nextcloud](https://www.npmjs.com/package/nodebb-plugin-sso-nextcloud)**
>
> NodeBB NextCloud OAuth SSO

Thanks and best regards

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [December 18, 2019, 10:14pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/6 "2019-12-18T22:14:26Z")

</div>

Hello normando,

I can’t use nodebb sso nexcloud app, ihave ths error:  
identification certificat invalid

https://nodebb\_url/login is fordidden

Can you help me please ?

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [December 18, 2019, 11:10pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/7 "2019-12-18T23:10:52Z")

</div>

Hi.

You need to edit a few things to adapt to your setup. Please, read the README file o read at [https://github.com/NormandoHall/nodebb-plugin-sso-nextcloud](https://github.com/NormandoHall/nodebb-plugin-sso-nextcloud)

Of course you need to replace some strings like NODEBB\_URL with you own domain name. Basically:

- Go to your NextCloud -\> Settings - \> Security, scroll down to OAuth 2.0 Clients.
- Add new client with a name, and the callback URL, like this: `https://NODEBB_URL/auth/nextcloud/callback` (replace with **NODEBB\_URL** with you domain)
- The copy the generated ID and SECRET
- Open and edit your NodeBB `config.json` file and add the ID/Secret pair:

```auto
  "oauth": {
    "id": "someoauthid",
    "secret": "youroauthsecret"
  },

```

- Open and edit the file `library.js` located under **node\_modules/nodebb-plugin-sso-nextcloud** , replace **NC\_URL** with your NextCloud URL (lines 60, 61 and 65)
- Activate this plugin from the plugins page
- Restart your NodeBB

Let me know if you can fix it.

Regards

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [December 19, 2019, 8:44am UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/8 "2019-12-19T08:44:01Z")

</div>

Thanks for your answer, but I did everything you explain to me. I followed the readme of the application. But the error is present. My nextcloud is managed by an active directory.

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [December 19, 2019, 7:35pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/9 "2019-12-19T19:35:35Z")

</div>

Are you restart NodeBB? You get the same error? Are you using SSL? Your nodeBB is under **http** or **https**?

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [December 20, 2019, 1:40pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/10 "2019-12-20T13:40:22Z")

</div>

With NodeBB v1.13.1 and Nextcloud 17.1  
With nextcloud ldap app

[[error:invalid-login-credentials]]  
URL de la requête :[https://domaine.org/login](https://domaine.org/login)

Méthode de la requête :POST

Adresse distante :x.x.x.x:443

Code d’état :

403

Version :HTTP/2.0

Politique de référent :strict-origin-when-cross-origin

Maybe i must in NodeBB ACP do Settings\>User\>User Registraion\>No Registration ?  
After test same result

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [December 20, 2019, 8:27pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/11 "2019-12-20T20:27:42Z")

</div>

Leave registration settings as you want.

To discard ldap, register one single user in NC and test with that user.

Another thing I suspect is your web server configuration for nodeBB. If you are using nginx, this is my conf

```
upstream io_nodes {
    ip_hash;
    server 127.0.0.1:20000;
    server 127.0.0.1:20001;
    #server 127.0.0.1:20002;
    #server 127.0.0.1:20003;
}

server {
  listen 80;
  server_name forum.domain.com.ar;
  return 301 https://forum.domain.com.ar$request_uri;
}

server {
    listen 443 ssl http2;
    server_name forum.domain.com.ar;
    root /opt/forum/nodebb/public;

# access_log /var/log/nginx/forum-access.log;
access_log off;
    error_log /var/log/nginx/forum-error.log;
    ssl_certificate /etc/letsencrypt/live/domain.com.ar/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/domain.com.ar/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    # Add headers to serve security related headers
    # Before enabling Strict-Transport-Security headers please read into this topic first.
# add_header Strict-Transport-Security "max-age=0";
## add_header X-Content-Type-Options nosniff;
    add_header X-Frame-Options "SAMEORIGIN";
# add_header X-XSS-Protection "1; mode=block";
# add_header X-Robots-Tag none;
    add_header X-Download-Options noopen;
    add_header X-Permitted-Cross-Domain-Policies none;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;

        proxy_pass http://io_nodes; # no trailing slash
        proxy_redirect off;

        # Socket.IO Support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    gzip on;
    gzip_min_length 1000;
    gzip_proxied off;
    gzip_types text/plain application/xml text/javascript application/javascript application/x-javascript text/css application/json;

}
```

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [December 21, 2019, 1:29pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/12 "2019-12-21T13:29:32Z")

</div>

I am under apache, my config:  
\<VirtualHost \*:443\>  
Protocols h2 http/1.1  
ServerName [nodebb.domaine.org](http://nodebb.domaine.org)

SSLEngine on  
SSLCertificateFile /etc/ssl/private/nodebb\_domaine\_org.crt  
SSLCertificateKeyFile /etc/ssl/private/nodebb.domaine.org.key  
SSLCertificateChainFile /etc/ssl/private/nodebb\_domaine\_org.ca-bundle

```
# Basic security headers
Header always set X-Content-Type-Options "nosniff"
Header always set X-Xss-Protection "1; mode=block"

# NodeBB header
RequestHeader set X-Forwarded-Proto "https"

# Static file cache
<FilesMatch "\.(ico|jpg|jpeg|png|gif|js|css)$">
    <IfModule mod_expires.c>
        ExpiresActive on
        ExpiresDefault "access plus 14 days"
        Header set Cache-Control "public"
    </IfModule>
</FilesMatch>

ProxyRequests off
<Proxy *>
    Order deny,allow
    Allow from all
</Proxy>

# Custom Error Document when NodeBB is offline
ProxyPass /error-documents !
ErrorDocument 503 /error-documents/503.html
Alias /error-documents /root/nodebb/public

# Websocket passthrough
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/socket.io [NC]
RewriteCond %{QUERY_STRING} transport=websocket [NC]
RewriteRule /(.*) ws://localhost:4567/$1 [P,L]

ProxyPass / http://localhost:4567/
ProxyPassReverse / http://localhost:4567/

# Log stuff
ErrorLog ${APACHE_LOG_DIR}/nodebb.domaine.org-error.log
CustomLog ${APACHE_LOG_DIR}/nodebb.domaine.org.log combined

```

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [December 21, 2019, 6:46pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/13 "2019-12-21T18:46:18Z")

</div>

Can you run this in a console and paste the results ?

`curl https://NC_USERNAME:NC_PASS@NC_URL/ocs/v2.php/cloud/user -H 'OCS-APIRequest: true'`

Replace NC\_USERNAME, NC\_PASS, NC\_URL with your values

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [December 21, 2019, 11:56pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/14 "2019-12-21T23:56:16Z")

</div>

With your command:  
curl https://NC\_USERNAME:NC\_PASS@NC\_URL/ocs/v2.php/cloud/user -H ‘OCS-APIRequest: true’

Result:

-bash: !@NC\_URL/ocs/v2.php/cloud/user: event not found

With this command:  
curl -u NC\_USERNAME:NC\_PASS -X GET ‘https://NC\_URL/ocs/v2.php/cloud/user’ -H ‘OCS-APIRequest: true’

wih nc\_username test2

?xml version=“1.0”?  
ocs  
meta  
status\>ok\</status  
statuscode\>200\</statuscode  
message\>OK\</message  
meta  
data  
storageLocation\>/var/nc\_data/test2\</storageLocation  
id\>test2\</id  
lastLogin\>xxxxx728xxxxx\</lastLogin  
backend\>LDAP\</backend  
subadmin/  
quota\>  
free\>xxxxx14xxxxx\</free  
used\>0\</used  
total\>xxxxx14xxxxx\</total  
relative\>0\</relative  
quota\>-3\</quota  
quota\>  
email\>[test2-Rocket@mail.fr](mailto:test2-Rocket@mail.fr)\</email  
phone\>\</phone  
address\>\</address  
website\>\</website  
twitter\>\</twitter  
groups\>  
element\>Groupe\</element  
groups\>  
language\>\</language  
locale\>  
backendCapabilities  
setDisplayName\>\</setDisplayName  
setPassword\>\</setPassword  
backendCapabilities  
display-name\>test test2\</display-name

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [January 1, 2020, 9:26pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/15 "2020-01-01T21:26:07Z")

</div>

@ludovicis there was a bug in the code. Please, update plugin to the last version (0.3.6), change again the lines 60, 61 and 65 of library.js, reload, restart and test again. Sorry for the inconvenience

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [January 3, 2020, 8:33am UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/16 "2020-01-03T08:33:06Z")

</div>

Happy new year  
Thanks Normando, it’s ok with the update plugin.

How i can customize the new button in “To log in” “other connection methods”, please ?  
To put for example “Connection with nextcloud”…

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [January 3, 2020, 12:06pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/17 "2020-01-03T12:06:02Z")

</div>

Happy New Year ludovicis!!!

In line 160 of library.js you can see the Fon Awesome icon used: `fa-check-square`

You have a few choices.

First, look at similar plugins, like nodebb-plugin-sso-facebook to look at how customized this and repeat the same for this plugin. This require to use templates, etc.

Another and simpler. In your nodeBB Admin Control Panel, go to Appearance - \> Custom Content, and select Custom CSS/LESS. Add this line (of course customize as you want):

`.nextcloud a i::after{content: " Connection with nextcloud"; font-size: 24px; }`

Set “Enable Custom CSS/LESS” switch, and save the changes. Reload browser and you see the text.

You can change the icon, and the text, add background to css and vertical aling your text.

Regards!

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [January 3, 2020, 12:57pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/18 "2020-01-03T12:57:12Z")

</div>

Thanks for your quick answer 🙂

.nextcloud a i::after{content: " Connection with nextcloud"; font-size: 24px; }  
Don’t work ☹

But i can change with my fr language in /…/nodebb/public/language/fr and /…/nodebb/build/public/language/fr  
the line “alternative logins” “Autres méthodes de connexion” by “Se connecter via Nextcloud”

I will test other customize setting  
Thanks again for your help

---

<div class="post-metadata">

**Author:** ![normando](https://help.nextcloud.com/letter_avatar/normando/32/5_5575768a8748004e209b776fc1b2916d.png) [@normando](https://help.nextcloud.com/u/normando)\
**Post date:** [January 3, 2020, 1:21pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/19 "2020-01-03T13:21:46Z")

</div>

FYI there is no need to change language into build directory, because this is update every time you upgrade you nodeBB. Change only under public folder, and do in root folder of nodeBB:

`./nodebb build languages`

It is strange there is no changes when you add this class into custom css classes.

`.nextcloud a i::after{content: " Se connecter via Nextcloud"; font-size: 24px; }`

Ensure you enabled live reload and custom classes switches, and save then when finish.

You’re welcome.

---

<div class="post-metadata">

**Author:** ![ludovicis](https://help.nextcloud.com/letter_avatar/ludovicis/32/5_5575768a8748004e209b776fc1b2916d.png) [@ludovicis](https://help.nextcloud.com/u/ludovicis)\
**Post date:** [January 3, 2020, 1:30pm UTC](https://help.nextcloud.com/t/integrate-nc-with-nodebb-forums-with-this-oauth2-sso-plugin-for-register-login/64451/20 "2020-01-03T13:30:01Z")

</div>

You are right, it’s ok now with enabled live reload and custom classes switches.