Hi Auth0 Community,
I try to implement a SSO for a Wordpress instance, which uses a Django API using Javascript requests.
My idea is, that the user logs in with the Auth0 Wordpress Plugin, and is then authenticated for Wordpress and the Django server. So I installed the auth0 Wordpress Plugin, and configured authentication with Auth0. This parts works. User is authenticated in Wordpress. Now comes the hard part: I want the Django server to know, that the user is already authenticated. So I activated the SSO Option for the Wordpress plugin.
And now I’m stuck. How can django know, that the user is already authenticated? I do not want the user to confirm something.
- Is it enought to implement the authentication backend like in: https://auth0.com/docs/quickstart/webapp/django/01-login
- Or do I need to do token validation like in https://auth0.com/docs/quickstart/backend/django/01-authorization
- Do I need different Auth0 APIs? Or do I use the same client ID for Django and Wordpress?
Wordpress is running on mydomain.com, server on serve.mydomain.com.
Thank you!