Download the PHP package wapplersystems/multisite-belogin without Composer
On this page you can find all versions of the php package wapplersystems/multisite-belogin. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download wapplersystems/multisite-belogin
More information about wapplersystems/multisite-belogin
Files in wapplersystems/multisite-belogin
Download wapplersystems/multisite-belogin
More information about wapplersystems/multisite-belogin
Files in wapplersystems/multisite-belogin
Vendor wapplersystems
Package multisite-belogin
Short Description Cross site/domain backend login for TYPO3. It allows backend users to work in the frontend across domains.
License GPL-2.0-or-later
Homepage https://github.com/WapplerSystems/t3-multisite_belogin
Package multisite-belogin
Short Description Cross site/domain backend login for TYPO3. It allows backend users to work in the frontend across domains.
License GPL-2.0-or-later
Homepage https://github.com/WapplerSystems/t3-multisite_belogin
FAQ
After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.
Example:
Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories.
In this case some credentials are needed to access such packages.
Please use the auth.json textarea to insert credentials, if a package is coming from a private repository.
You can look here for more information.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?
Informations about the package multisite-belogin
Multisite Backend Login
TYPO3 extension for automatic cross-domain backend login. Allows editors to use backend tools (e.g. frontend preview) across all configured site domains without separate login per domain.
Requirements
- TYPO3 v14+
- PHP 8.2+
- Backend must be accessed via HTTPS
Installation
Add the refresh GET parameter to the cacheHash exclusion list in config/system/settings.php:
How it works
When an editor clicks "View page" in the TYPO3 backend, the target page may be on a different domain than the backend. Without this extension, the editor would not be authenticated on that domain and could not see unpublished content or use the admin panel.
This extension solves this by:
- Token generation -- When the editor triggers a frontend preview, a short-lived token (60s TTL) is generated and stored in the backend session.
- Redirect -- The preview URL is rewritten to pass through the token authentication endpoint (
/typo3/msbl/tokenauth) with the token, user ID, and original target URL. - Token validation -- The middleware intercepts the request, validates the token against the stored session data, and authenticates the user.
- Cookie propagation -- A backend session cookie with
SameSite=Noneis set on the response, enabling cross-domain authentication. - Redirect to target -- The editor is redirected to the original preview URL, now fully authenticated.
Architecture
Authentication flow
Components
| Component | Description |
|---|---|
TokenGenerator |
Generates 40-char random hex tokens via TYPO3\CMS\Core\Crypto\Random |
TokenAuthenticationService |
TYPO3 auth service (subtype: getUserBE,authUserBE) that validates tokens against stored sessions |
TokenLoginAuthenticator |
PSR-15 middleware on /typo3/msbl/tokenauth -- validates token, sets session cookie, redirects |
LoginController |
Backend route /msbl/redirectToFrontend -- generates token, stores in session, builds redirect URL |
TokenController |
Backend route for programmatic token generation (JSON API) |
AfterPagePreviewUriGeneratedEventListener |
Rewrites preview URIs to route through the token auth endpoint |
BeforeUserLogoutEventListener |
On logout: removes all other sessions for the user |
AfterUserLoggedOutEventListener |
On logout: cleanup of all remaining sessions |
UserSessionManager |
Extends core UserSessionManager to expose the session backend for direct session access |
Configuration files
| File | Purpose |
|---|---|
Configuration/Backend/Routes.php |
Registers /msbl/redirectToFrontend and /msbl/tokenauth backend routes |
Configuration/RequestMiddlewares.php |
Registers TokenLoginAuthenticator before backend routing |
Configuration/Services.yaml |
DI config + event listener registration |
Configuration/Icons.php |
Toolbar and module icons |
Security considerations
- Tokens are cryptographically random (40-char hex)
- Tokens expire after 60 seconds
- Token validation uses safe
unserialize()withallowed_classes: false - Session cookies are set with
SameSite=None(requires HTTPS) - Failed login attempts are logged via PSR-3 logger
License
GPL-2.0-or-later
All versions of multisite-belogin with dependencies
PHP Build Version
Package Version
The package wapplersystems/multisite-belogin contains the following files
Loading the files please wait ...