Integrate with EDD

[Shelob9]

Integrate with EDD

[Shelob9]

I'd like to pass URL variable of an access key from Help Scout to the Access Key Login form.

1. Check if its in the query and if so, add it to the window.tlVendor.accessKey array. https://github.com/trustedlogin/vendor/blob/main/admin/trustedlogin-settings/init.php#L31
2. If window.tlVendor.accessKey.key, use that value for a hidden field instead of the input https://github.com/trustedlogin/vendor/blob/main/admin/components/AccessKeyForm.js#L204
3. Add a second conditional here to submit for if window.tlVendor.accessKey.key https://github.com/trustedlogin/vendor/blob/main/admin/components/AccessKeyForm.js#L121
4. Figure out how to deal with account ID https://github.com/trustedlogin/vendor/blob/main/admin/components/AccessKeyForm.js#L176

[zackkatz]

Status:

• ✅ Shows the active logins
• ✅ Points to the right URLs
• ❌ Passes validation to redirect to site login

Getting a bad_nonce error, since the nonce is old.

[zackkatz]

I'd like to pass URL variable of an access key from Help Scout to the Access Key Login form.

• It will be encrypted using the Help Scout secret.
• It will be decrypted and added to the form.
• The form will auto-submit when loaded.

@Shelob9 See what I mean in this video.

[Shelob9]

When that request passes nonce validation, it just outputs JSON. Instead, it should redirect to the site using the $_POST trick in

That's all done client side though. https://github.com/trustedlogin/vendor/blob/main/admin/components/AccessKeyForm.js#L92-L115

We could use wp_remote_post(loginurl) and then do a redirect(siteurl). That should work.

[Shelob9]

Allow a way for requests sourced from HS to bypass nonce validation while remaining secure

Nonces change based on who is logged in: user ID is one of the inputs of the hash. I don't think nonce validation should be used. If the signature matches, then its valid.

[Shelob9]

@zackkatz All of the discussion in this issue is RE: Helpscout return, not EDD integration. Also, we found the EDD integration is in place. So can we close this issue?

[zackkatz]

Yep, let's close.