volto-middleware-rejectanonymous

Volto add-on that reject unconditionnally anonymous users from a Volto site.

They should be redirected to a login form (customizable).

When login management is outside Plone, the first SSR page load is without login headers, so you have to refresh the page to have the proper tokens.

With this middleware, you can force SSR to make a fake call to a Plone view that simply make a redirect (and returns the auth tokens).

Getting started

Try volto-middleware-rejectanonymous with Docker

1. Get the latest Docker images

   docker pull plone
   docker pull plone/volto

2. Start Plone backend

   docker run -d --name plone -p 8080:8080 -e SITE=Plone -e PROFILES="profile-plone.restapi:blocks" plone

3. Start Volto frontend

   docker run -it --rm -p 3000:3000 --link plone -e ADDONS="volto-middleware-rejectanonymous" plone/volto

4. Go to http://localhost:3000

Add volto-middleware-rejectanonymous to your Volto project

1. Make sure you have a Plone backend up-and-running at http://localhost:8080/Plone

2. Start Volto frontend

• If you already have a volto project, just update package.json:

  "addons": [
      "volto-middleware-rejectanonymous"
  ],
  
  "dependencies": {
      "volto-middleware-rejectanonymous": "^0.1.0"
  }

• If not, create one:

  npm install -g yo @plone/generator-volto
  yo @plone/volto my-volto-project --addon volto-middleware-rejectanonymous
  cd my-volto-project

1. Install new add-ons and restart Volto:

   yarn
   yarn start

2. Go to http://localhost:3000

3. Happy editing!

Configuration

This add-on can be enabled with an environment variable RAZZLE_REJECT_ANONYMOUS. It is disabled by default.

Default redirect url is /login but you can override it with RAZZLE_REJECT_ANONYMOUS_REDIRECT_URL environment variable.

How to contribute

See DEVELOP.md.

Copyright and license

See LICENSE.md for details.