Release Notes

Fixed a minor memory leak with callback URLs, fixed labeling problem on register page.

  • hello


    using this. a user of my website, could make a "elgg connect":) for your own site?


  • I read the wiki where it says:

    "To register your consumer on the Elgg site, select Applications from the Tools menu, then "Registered Consumer Applications". From here you can register a new consumer which you can then use to access the Elgg site"

    but there's only a button on the left that says "Authorized Application Tokens" which doesn't do anything. There's no way to register a consumer. "Registered Consumer Applications" doesn't exist.

    Can you advise please?

  • OK so I found it eventually under Administration -> Register Consumer Applications.

    Does this mean you have to be an admin to use the plugin? How would a normal user allow a registered inbound consumer to access their account? When I go to Tools -> Applications nothing is there to allow the user to grant the newly registered inbound consumer access to their account.

  • @Codebrane: Oh, looks like the wiki is out of date. I'll go fix that, thanks.

    Yes, an administrator needs to add the consumer to the site. This restriction was requested by several people for security reasons. However, any end user can authorize a registered consumer to access their account. To do that, you actually start at the *client* side, and during the process the user will be prompted to authorize whatever application is asking for access.

  • Hello I'm new developing for Elgg and probably I am asking a stupid thing but I don't know how to do.

    I want to do a Consumer, to do that I read in wiki I have to do a new plugin (new folder in mod) and create a start.php in file with this content

    register_elgg_event_handler('init', 'system', 'blti_consumer_init');

    function blti_consumer_init(){

    register_plugin_hook('plugin:setting', 'all', 'blti_consumer_plugin_setting');}

    function blti_consumer_plugin_setting($hook, $entity_type, $returnvalue, $params) {

    global $CONFIG;



    But never goes to blti_consumer_plugin_setting, I don't know when is call "register_plugin_hook('plugin:setting', 'all', 'blti_consumer_plugin_setting');". I think I need a trigger

    isn't it??



  • @Antoni: That code is only triggered if you're saving your plugin deatils through the plugin settings admin interface:

    I usually put up a simple form that lets people register the key and secret from that page. The callback hook lets you save the plugin settings into an OAuth entity, which is easier to integrate with the rest of the OAuth system.

  • Big problem.

    It seems many host delete Authorization headers on mutualised server... WTF!

    So we can't use it. The solution would be to change the Authorization name to X-Authorization1 for example.

  • @jcrestin: You don't have to use the auth headers, you can use query or form parameters instead. OAuth supports all three methods equally, and the latter two should survive a multi-homed host just fine.

  • hmmm I forgot it ^^ my client library is based on the header, I'll change it :D thanks 

  • Hi,

    I enabled the plugin, but Seesmic desktop says: "Incorrect URL or problem using OAuth"

    can someone help me?

    Its a Server problem?

  • @szili: I haven't ever used the Seesmic desktop program to connect to Elgg, but I would imagine this is a configuration problem. Are you sure you're using the right URLs and other parameters?

  • @Justin Richer: Thanks for your reply,

    The URL is good
    Seesmic Application parameters mean?
    Are automatically be set by Seesmic plugin...

    So why write then OAuth error?


  • Hi Justin

    Got the plugin installed (after dealing with twitterservice goetcha) and thank you for it. I'm planning to use it outbound to consume a remote service. I've found the Registered Consumer Applications and think I understand how to register an outboud service (is the URL a token request URL, for example?) and the rest looks OK.

    However (this sounds stupid I know) what do I do, to let another plugin use Oauth to get some stuff from a remote service? I've got a crude Elgg plugin that connects with this: that just depends on hashed shared secret and I want to 'upgrade' to Oauth, if possible without recoding a lot of 'infrastructure'.

    Thanks in advance for any help, best regards Hugh Barnard


  • Hi Justin

    Making some progress, got some of the code from the wiki into my plugin and set some dummy parameters into the oauth plugin I've got my plugin, oauth etc. enabled and I've logged in as a 'user'. I go to http://<mydomain>/pg/oauth/authorize and get: Your account has not been set up to access any external applications under Outbound.

    I need [I guess] some extra forms and/or logic  in my plugin to get the two tokens for the user [using the 'base' parameters in the oauth plugin?] but I'm still not sure how this slots in...

    Thanks, in advance Hugh


  • Hi Justin,

    I'm developer who is trying to access my API on Elgg 1.8 using OAuth. I unexpectadly found that there is no Register New Consummer link. But actually there is an OAuth Plugin anabled on the plugin page.

    Does OAuth plugin works fine on 1.8, and if so where can I register new Consummer.

    Thank you,


  • @Eugene: I haven't adapted the OAuth plugin for 1.8 yet (we're still running 1.7 here), but it shouldn't completely break. In 1.7, the consumer management page is in administration section of the site (/pg/admin/) and the link should show up in the menu as "Registered Consumer Applications". From there you can add new inbound consumer applications.

  • @Justin,

    Was able to find "Registered Consumer Applications" on 1.7 (triyed that version) but there is no such link on 1.8

    I'm going to investigate, if I can workaround that, but are there any plans about adopting oAuth to 1.8 ?

    thanks for response, it was helpfull.



  • Category: Authentication
  • License: GNU General Public License (GPL) version 2
  • Updated: 2014-11-17
  • Downloads: 18569
  • Recommendations: 13

Other Projects

View Justin Richer's plugins