Hello @jalathpc_demo
I tried to create a patch:
https://github.com/LM1LC3N7/nodebb-plugin-private-forum/releases/tag/v1.3.1
I no longer have a NodeBB instance, so let me know if it works (I am honestly not sure, as /logout should be allowed as you are logged in.
It would be interesting to check if req.loggedIn is correctly set when using SSO. This could be why the plugin is not working as you need.
NPM link: https://www.npmjs.com/package/nodebb-plugin-private-forum/v/1.3.1
@pitaj Yes, this is why I don't understand. And I only stop the nodebb container, not the db container.
Hello all
I am creating my own docker container, and I have an issue with plugin being reactivating after a docker re-creation.
At container start (nodebb code & dependencies are already installed) :
After each startup, the default composer is enabled again. Do you know why?
@baris My god, it's not good to work with bash and javascript at the same time (thank you btw) 
My "old" code is still working well without depreciation warning, thanks for your answers 
@baris infact I have installed the old version and I update the installed module directly (in node_modules folder).
I rebuild and restart nodebb, but the plugin version is still the old one.
Does my plugin file code looks ok to you?
@baris After a rebuild, reset module and activate again, still nothing.
I have manually changed the package.json version number but the old version still appears. An idea why? My updates are maybe never used?
Hello @baris and @magnusvhendin
I would like to update my module nodebb-plugin-private-forum that should do exactly what you are trying to archive.
But it seems it is not working well with v1.16.2 and I need some help on the Hook declaration.
I understand that I need to use response:router.page, but how exactly?
Is this ok for you?
plugin.json
{
"id": "nodebb-plugin-private-forum",
"url": "https://github.com/LM1LC3N7/nodebb-plugin-private-forum",
"library": "./library.js",
"hooks": [{
"hook": "response:router.page", "method": "init"
}]
}
library.json
'use strict';
const plugin = {};
var winston = module.parent.require('winston');
const helpers = require.main.require('./src/controllers/helpers');
plugin.init = async (data) => {
const allowedPages = /\/(assets\/|login|register|reset|plugins\/).*|.*(.css|.js)$/;
winston.verbose("[plugin-nodebb-private-forum] Checking URL ("+ req.url +"), redirection.");
# Allow only few pages or logged in users
if (data.req.loggedIn || allowedPages.test(req.url)) {
return data;
}
# else redirect to /login.
winston.verbose("[plugin-nodebb-private-forum] User is NOT logged or URL is NOT allowed.");
return Helpers.notAllowed(data.req, data.res);
};
module.exports = plugin;
I can't see any of the debug log messages containing accessed URL
@julian ok, I was thinking that the nbbpm was here for that!
Thank you for your answer!
Do you know why there is still this message?
"nbbpm": {
"compatibility": "^1.11.2"
}
The plugin is now live on npm and should be automatically updated when I create a new release version on GitHub.
Thank you again, now it seems to work well!
Can you review the code and maybe test the module?
I would like to be sure that I have not forgot something.
A NodeBB plugin to lockdown the forum to non-registered users. - LM1LC3N7/nodebb-plugin-private-forum
GitHub (github.com)
@PitaJ thanks!
Do you know if there is an helper to check if the user is connected?
Hello guys,
I am starting to develop the plugin, but I did not understand how to add my code as a middleware and use the req object.
For now it is not working because I don't know how to get the req object (undefinied).
Here's my plugin:
'use strict';
const plugin = {};
var winston = module.parent.require('winston');
const helpers = require.main.require('./src/controllers/helpers');
plugin.init = function (params, callback) {
const { app, middleware, router } = params;
var allowedPages=["/login", "/register", "/reset"];
console.log("==================================");
console.log(" Plugin Private Forum Initialized ");
console.log("==================================");
if (allowedPages.indexOf(req.url) < 0) {
helpers.notAllowed(req, res, next);
} else {
console.log("PLUGIN PRIVATE FORUM: req.url="+req.url+", user is logged");
winston.log("PLUGIN PRIVATE FORUM: req.url="+req.url+", user is logged");
next();
}
};
module.exports = plugin;
You can see it here: https://github.com/LM1LC3N7/nodebb-plugin-private-forum/blob/master/library.js
Of course there are errors:
2020-06-03T15:55:06.696Z [4567/1731] - verbose: [plugins/fireHook] static:app.load
==================================
Plugin Private Forum Initialized
==================================
2020-06-03T15:55:06.733Z [4567/1731] - error: [plugins] Error executing 'static:app.load' in plugin 'nodebb-plugin-private-forum'
2020-06-03T15:55:06.734Z [4567/1731] - error: ReferenceError: req is not defined
at Object.plugin.init [as method] (/etc/nodebb/nodebb-plugin-private-forum/library.js:16:27)
at /nodebb/src/plugins/hooks.js:176:30
at /nodebb/node_modules/async/dist/async.js:2154:44
at eachOfArrayLike (/nodebb/node_modules/async/dist/async.js:500:13)
at eachOf (/nodebb/node_modules/async/dist/async.js:551:16)
at awaitable (/nodebb/node_modules/async/dist/async.js:208:32)
at Object.eachLimit (/nodebb/node_modules/async/dist/async.js:2216:16)
at /nodebb/node_modules/async/dist/async.js:216:25
at new Promise (<anonymous>)
at Object.awaitable (/nodebb/node_modules/async/dist/async.js:211:20)
@julian I tried this already.
But this is not secure, as the API can still be requested manually (for example user pages are public).
Using a middleware I can filter all requests and only serve the login or register page.
Front code is not secure because the user can remove it.
@PitaJ I think I begin to understand the concept.
Using the following plugin.json my script can use the express object to intercept each requests?
{
"id": "nodebb-plugin-private-forum",
"url": "httls://github.com/..../.......",
"library": "./private-forum.js",
"hooks": [
{ "hook": "static:app.load", "method": "init" }
]
}
I am not sure about the hook configuration.
This is the kind of code I would like to use in my plugin:
app.use(function(req, res, next) {
if (req.session.user == undefined) {
return res.render('/login');
}
else {
next();
}
});
@PitaJ said in Private forum plugin:
What you want is to add a new middleware that applies to all routes except those related to login and register.
Yes, you are totally right.
Do you have in mind a plugin that add a middleware in static:app.load handler?
It will be faster to clone and edit it 
I will take a look at the documentation.
Hello,
I would like to create a private forum using NodeBB but it seems that there is no real complete option or plugin to achieve this.
My idea is to add a new route that will be used before all. It will check if the user is connected (using the cookie).
If not : the request is blocked and redirected to /login, if yes, the request is allowed.
Workflow:
if no, redirect it to /login (Only /login and /register are allowed)
if yes, the request is allowedCan a NodeBB developper help me to:
Thanks a lot!
Problem solved, for the record I have added all file on my GitHub: https://github.com/LM1LC3N7/Dockerfiles/blob/master/nodebb/README.md