Bypass login for localhost environment

The CMS Questions
1

Is there a simple way to skip the login process for localhost environment? Like, I go to http://localhost/kirby/panel/ not need to fill in the login form?

2

My idea was to set panel.session.lifetime to invinite (0) and increase panel.session.timeout, but this didnā€™t work for me ā€¦

in site/config/config.php

c::set('panel.session.lifetime', 0);
c::set('panel.session.timeout', 2160); // 36 hours
3

Doesnā€™t the session die when browser is closed? Iā€™m hoping for a solution that works even if I restart my computer.

I bet this is a hard nut to crack.

Nice try anyway! :slight_smile:

4

I havenā€™t tested this, but canā€™t you fix it by creating a custom route with this url ( you can use config.localhost to only apply this logic on your dev environment, see here, under ā€˜multi environment optionsā€™ : http://getkirby.com/docs/advanced/options ), log the admin user in at the ā€˜actionā€™ and then go('/panel') ?

Again, I didnā€™t test this, just thinking out loud! :slight_smile:

Edit Now that I look somewhat further in the documentation, I donā€™t know this will work because you need to return something, the ā€˜goā€™ in this example, but you also need to execute the ā€˜loginā€™ part. Sorry :slight_smile:

2 Likes
5

This works for me ā€¦

c::set('routes', array(
  array(
    'pattern' => 'autologin',
    'action'  => function() {
      $username = 'YOURUSERNAME';
      $password = 'YOURPASSWORD';
      
      // Prevent access on the production system
      if(url::host() !== 'localhost') return false;
      
      $user = site()->user($username);
      if($user and $user->login($password)) {
        go('panel'); // or use go(); to redirect to the frontpage
      } else {
        echo 'invalid username or password';
        return false;
      }

    }
  )
));

Adjust $username and $password and visit http://yoursite.tld/autologin

As @gerardkd mentioned this should only be added to your local config!

1 Like
6

I have added a check to your code that only logs the user in on localhost to make sure. :slightly_smiling:

1 Like
7

How awesome is that! You are my hero of the day! :slight_smile:

1 Like
8

Plugin

autologin.php

Add this code to /site/plugins/autologin/autologin.php.

<?php
autologin();

function autologin() {
  // Prevent access on the production system
  if(url::host() !== c::get('autologin.host', 'localhost')) return false;

  // Add route if localhost environment
  kirby()->routes(array(
    array(
      'pattern' => c::get('autologin.route', 'autologin'),
      'action'  => function() {
        $user = site()->user( c::get('autologin.username') );
        if($user and $user->login( c::get('autologin.password') ) ) {
          go( c::get('autologin.redirect', 'panel') );
        } else {
          echo 'Invalid username or password';
          return false;
        }
      }
    )
  ));
}

config.php

Add this to your config.php.

c::set('autologin.username', 'your-username');
c::set('autologin.password', 'your-password');
c::set('autologin.redirect', 'site'); // Defaults to "panel"
c::set('autologin.route', 'slug'); // Defaults to "autologin"
c::set('autologin.host', 'host'); // Defaults to "localhost"
2 Likes
9

Looks great! Just a little improvement you could make:

The c::get() function accepts a default value, so you can use the following to make it even more flexible:

go(c::get('autologin.redirect', 'panel'));

The config value could then be set to any page URI or not defined to be set to panel.

1 Like
10

Thanks! Yes, I knew about it. Was in a hurry to get it out, I guess. Updated the code.

Custom route option added

I also added to option to add a custom route if ā€œautologinā€ is not the prefered slug to use.

11

If you use custom hosts with Mamp or something, like ā€˜myproject.devā€™, the if-check will always return false. If you set that as a option as well, itā€™s totally flexible for your dev-environment needs :slight_smile:

1 Like
12

Agree! I added another option to the code. Thanks!

13

That was great teamwork!
@jenstornell, @gerardkd, @lukasbestle
:smile:

2 Likes
14

Would it be ok if I add the plugin (that is much based on your code) and put it on Github? I have some ideas on more development on this thing.

I will try to add stuff to make it possible to have an autologin on a live site as well. I know it can be really dangerous with just a link to login but with some extra protection layers I hope it might work.

15

Ok, no problem. Maybe you can mention me/us :wink:

16

Sure, thanks! :slight_smile:

I donā€™t have a schedule for it yet so donā€™t sit up and wait (Iā€™m working on my Splitview plugin right now).

17

ā€¦and now it has evolved into a pluginā€¦

Github: https://github.com/jenstornell/kirby-autologin