PHPackages                             jiushutech/flarum-dingtalk-login - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. jiushutech/flarum-dingtalk-login

ActiveFlarum-extension[Authentication & Authorization](/categories/authentication)

jiushutech/flarum-dingtalk-login
================================

DingTalk (钉钉) login integration for Flarum

1.3.0(3mo ago)05MITPHP

Since Feb 2Pushed 3mo agoCompare

[ Source](https://github.com/jiushutech/flarum-dingtalk-login)[ Packagist](https://packagist.org/packages/jiushutech/flarum-dingtalk-login)[ RSS](/packages/jiushutech-flarum-dingtalk-login/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (2)Versions (4)Used By (0)

钉钉登录 Flarum 插件 | DingTalk Login for Flarum
==========================================

[](#钉钉登录-flarum-插件--dingtalk-login-for-flarum)

[![Latest Stable Version](https://camo.githubusercontent.com/c804bacbaba6420a821cb48d0f0b2068e6ce040605f273e359123e963d71a267/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f6a6975736875746563682f666c6172756d2d64696e6774616c6b2d6c6f67696e2e737667)](https://packagist.org/packages/jiushutech/flarum-dingtalk-login)[![License](https://camo.githubusercontent.com/3f30cb2e68d4f6233cfc322f7f1c927873aece47e1ebcffae19d1413954d4160/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f6c2f6a6975736875746563682f666c6172756d2d64696e6774616c6b2d6c6f67696e2e737667)](https://packagist.org/packages/jiushutech/flarum-dingtalk-login)[![Flarum](https://camo.githubusercontent.com/8ad3f44bc93b041544215d228bb741cb50ec8c2480f23efa43f323f54f6d5fb9/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f466c6172756d2d312e382532422d6f72616e6765)](https://flarum.org)

[English](#english) | [中文](#%E4%B8%AD%E6%96%87)

---

中文
--

[](#中文)

一款功能完整的钉钉登录 Flarum 扩展插件，支持 PC 扫码登录、H5 内嵌免登、企业专属登录等特性。

### ✨ 功能特性

[](#-功能特性)

#### 核心功能

[](#核心功能)

- 🔐 **钉钉 OAuth 2.0 登录** - 支持 PC 端扫码登录
- 📱 **H5 内嵌免登** - 在钉钉客户端内自动完成登录
- 🔗 **账号绑定** - 支持现有用户绑定/解绑钉钉账号
- 👤 **自动注册** - 未关联用户可自动创建新账号

#### 登录控制

[](#登录控制)

- ⚡ **强制绑定** - 要求所有用户必须绑定钉钉账号
- 🚫 **仅钉钉登录** - 禁用原生登录，仅允许钉钉登录
- 🏢 **企业专属登录** - 仅允许指定企业的用户登录
- 🛡️ **管理员豁免** - 指定用户可绕过登录限制
- 🔘 **显示登录按钮开关** - 可控制是否在登录页面显示钉钉登录按钮

#### 增强功能

[](#增强功能)

- 📊 **登录日志** - 记录所有登录行为，支持查询和导出
- 🔄 **信息同步** - 同步钉钉昵称、头像
- 🌐 **多语言支持** - 支持中文和英文
- 💬 **友好错误提示** - H5登录失败时显示弹窗提示

### 📋 环境要求

[](#-环境要求)

- Flarum 1.8.0+
- PHP 8.0+
- MySQL 5.7+ / MariaDB 10.2+

### 🚀 安装

[](#-安装)

```
composer require jiushutech/flarum-dingtalk-login
```

然后在 Flarum 后台启用扩展。

### ⚙️ 配置

[](#️-配置)

#### 1. 创建钉钉应用

[](#1-创建钉钉应用)

1. 登录 [钉钉开放平台](https://open.dingtalk.com/)
2. 创建一个企业内部应用或第三方应用
3. 获取 **AppKey** 和 **AppSecret**
4. 如需 H5 免登功能，还需获取 **AgentId** 和 **CorpId**

#### 2. 获取 CorpId

[](#2-获取-corpid)

CorpId（企业ID）可以通过以下方式获取：

**方法一：钉钉开放平台获取**

1. 登录 [钉钉开放平台](https://open.dingtalk.com/)
2. 点击右上角头像，选择「开发者后台」
3. 在左侧菜单选择「应用开发」→「企业内部开发」
4. 选择你的应用，在应用详情页面可以看到 **CorpId**

**方法二：钉钉管理后台获取**

1. 登录 [钉钉管理后台](https://oa.dingtalk.com/)
2. 点击左下角「设置」
3. 在「企业信息」页面可以看到 **企业CorpId**

> Corp ID 格式通常为 `dingxxxxxxxxxxxxxxxx`

#### 3. 配置应用权限

[](#3-配置应用权限)

在钉钉开放平台的应用管理中，需要添加以下权限：

**必需权限：**

- `通讯录个人信息读权限` - 用于获取用户基本信息

**配置步骤：**

1. 进入应用管理 → 权限管理
2. 搜索并添加上述权限
3. 等待权限审核通过（部分权限需要审核）

> ⚠️ **重要提示**：如果遇到 `Forbidden.AccessDenied.AccessTokenPermissionDenied` 错误，说明应用缺少必要的权限配置。

#### 4. 配置回调地址

[](#4-配置回调地址)

在钉钉开放平台配置回调地址：

```
https://你的论坛域名/auth/dingtalk/callback

```

#### 5. 后台配置

[](#5-后台配置)

在 Flarum 后台 → 扩展 → 钉钉登录 中配置：

配置项说明AppKey钉钉应用的 AppKeyAppSecret钉钉应用的 AppSecretAgentIdH5 微应用的 AgentId（可选）CorpId企业 CorpId（H5免登必需）### 📖 使用说明

[](#-使用说明)

#### PC 扫码登录

[](#pc-扫码登录)

1. 用户点击登录页面的「钉钉扫码登录」按钮
2. 弹出钉钉扫码窗口
3. 用户使用钉钉 APP 扫码确认
4. 登录成功后自动跳转

#### H5 内嵌免登

[](#h5-内嵌免登)

1. 在钉钉客户端内打开论坛
2. 插件自动检测钉钉环境
3. 调用钉钉 JSAPI 获取免登授权码
4. 自动完成登录
5. 如果登录失败，会显示友好的弹窗错误提示

#### 账号绑定

[](#账号绑定)

1. 已登录用户进入「设置」页面
2. 点击「绑定钉钉」按钮
3. 完成钉钉授权后绑定成功

### 🔧 高级配置

[](#-高级配置)

#### 显示钉钉登录按钮

[](#显示钉钉登录按钮)

在后台「登录控制」标签页中可以控制是否在登录和注册页面显示钉钉登录按钮：

- **开启**（默认）：显示钉钉一键登录按钮
- **关闭**：隐藏钉钉登录按钮（但在钉钉客户端内仍会显示）

#### 强制绑定模式

[](#强制绑定模式)

开启后，未绑定钉钉的用户将无法：

- 发帖、回复
- 查看主题内容
- 进行其他操作

用户必须先绑定钉钉账号才能继续使用。

#### 仅钉钉登录模式

[](#仅钉钉登录模式)

开启后：

- 登录页面仅显示钉钉登录按钮
- 原生登录接口被禁用
- 豁免用户仍可使用原生登录

#### 企业专属登录

[](#企业专属登录)

开启后：

- 仅允许指定企业的钉钉用户登录
- 需要配置允许的企业 CorpId 列表
- 非指定企业用户将被拒绝登录

#### 自动注册

[](#自动注册)

- **开启**（默认）：未关联账号的钉钉用户登录时将自动创建新账号
- **关闭**：用户需要先注册或登录原始账号，然后绑定钉钉账号

### 🔒 安全说明

[](#-安全说明)

- OAuth 流程使用 state 参数防止 CSRF 攻击
- 后台接口验证管理员权限
- 所有与钉钉 API 的通信使用 HTTPS

### 📝 更新日志

[](#-更新日志)

#### v1.2.0 (2026-02-05)

[](#v120-2026-02-05)

- ✨ 新增「显示钉钉登录按钮」开关，可控制登录页面是否显示钉钉登录按钮
- 🐛 修复插件初始化失败的问题
- 🐛 修复钉钉环境检测和H5自动登录问题
- 🎨 更新钉钉官方图标
- 💬 H5登录失败时显示友好的弹窗错误提示
- 🌐 后端错误消息国际化，支持中英文

#### v1.0.0 (2026-02-02)

[](#v100-2026-02-02)

- 🎉 首次发布

### 🛠️ 开发

[](#️-开发)

#### 构建前端资源

[](#构建前端资源)

```
cd js
npm install
npm run build
```

#### 监听模式开发

[](#监听模式开发)

```
npm run dev
```

---

English
-------

[](#english)

A full-featured DingTalk login extension for Flarum, supporting PC QR code login, H5 auto-login, enterprise-only login, and more.

### ✨ Features

[](#-features)

#### Core Features

[](#core-features)

- 🔐 **DingTalk OAuth 2.0 Login** - PC QR code scanning login
- 📱 **H5 Auto-Login** - Automatic login within DingTalk client
- 🔗 **Account Binding** - Bind/unbind DingTalk account for existing users
- 👤 **Auto Registration** - Automatically create accounts for new DingTalk users

#### Login Control

[](#login-control)

- ⚡ **Force Binding** - Require all users to bind DingTalk account
- 🚫 **DingTalk Only** - Disable native login, only allow DingTalk login
- 🏢 **Enterprise Only** - Only allow users from specified enterprises
- 🛡️ **Admin Exemption** - Specified users can bypass login restrictions
- 🔘 **Show Login Button Toggle** - Control whether to show DingTalk login button on login page

#### Enhanced Features

[](#enhanced-features)

- 📊 **Login Logs** - Record all login activities with export support
- 🔄 **Info Sync** - Sync DingTalk nickname and avatar
- 🌐 **Multi-language** - Support Chinese and English
- 💬 **Friendly Error Messages** - Show popup alerts when H5 login fails

### 📋 Requirements

[](#-requirements)

- Flarum 1.8.0+
- PHP 8.0+
- MySQL 5.7+ / MariaDB 10.2+

### 🚀 Installation

[](#-installation)

```
composer require jiushutech/flarum-dingtalk-login
```

Then enable the extension in Flarum admin panel.

### ⚙️ Configuration

[](#️-configuration)

#### 1. Create DingTalk Application

[](#1-create-dingtalk-application)

1. Login to [DingTalk Open Platform](https://open.dingtalk.com/)
2. Create an internal enterprise app or third-party app
3. Get **AppKey** and **AppSecret**
4. For H5 auto-login, also get **AgentId** and **CorpId**

#### 2. Get CorpId

[](#2-get-corpid)

CorpId (Enterprise ID) can be obtained through:

**Method 1: DingTalk Open Platform**

1. Login to [DingTalk Open Platform](https://open.dingtalk.com/)
2. Click avatar → Developer Console
3. Go to App Development → Internal Enterprise Development
4. Select your app to see **CorpId**

**Method 2: DingTalk Admin Console**

1. Login to [DingTalk Admin Console](https://oa.dingtalk.com/)
2. Click Settings at bottom left
3. View **Enterprise CorpId** in Enterprise Info page

> Corp ID format is usually `dingxxxxxxxxxxxxxxxx`

#### 3. Configure Permissions

[](#3-configure-permissions)

Add the following permissions in DingTalk Open Platform:

**Required Permissions:**

- `Contact Personal Info Read` - For getting user basic info

**Steps:**

1. Go to App Management → Permission Management
2. Search and add the above permissions
3. Wait for permission approval (some permissions require review)

> ⚠️ **Important**: If you encounter `Forbidden.AccessDenied.AccessTokenPermissionDenied` error, it means the app lacks necessary permissions.

#### 4. Configure Callback URL

[](#4-configure-callback-url)

Configure callback URL in DingTalk Open Platform:

```
https://your-forum-domain/auth/dingtalk/callback

```

#### 5. Admin Configuration

[](#5-admin-configuration)

Configure in Flarum Admin → Extensions → DingTalk Login:

SettingDescriptionAppKeyDingTalk app AppKeyAppSecretDingTalk app AppSecretAgentIdH5 mini-app AgentId (optional)CorpIdEnterprise CorpId (required for H5 auto-login)### 📖 Usage

[](#-usage)

#### PC QR Code Login

[](#pc-qr-code-login)

1. User clicks "Login with DingTalk" button on login page
2. DingTalk QR code popup appears
3. User scans QR code with DingTalk app
4. Auto redirect after successful login

#### H5 Auto-Login

[](#h5-auto-login)

1. Open forum within DingTalk client
2. Plugin auto-detects DingTalk environment
3. Calls DingTalk JSAPI to get auth code
4. Auto complete login
5. If login fails, a friendly popup error message will be shown

#### Account Binding

[](#account-binding)

1. Logged-in user goes to "Settings" page
2. Click "Bind DingTalk" button
3. Complete DingTalk authorization to bind

### 🔧 Advanced Configuration

[](#-advanced-configuration)

#### Show DingTalk Login Button

[](#show-dingtalk-login-button)

In the "Login Control" tab, you can control whether to show the DingTalk login button on login and signup pages:

- **Enabled** (default): Show DingTalk quick login button
- **Disabled**: Hide DingTalk login button (but still shows within DingTalk client)

#### Force Binding Mode

[](#force-binding-mode)

When enabled, users without DingTalk binding cannot:

- Create posts or replies
- View topic content
- Perform other operations

Users must bind DingTalk account first to continue.

#### DingTalk Only Mode

[](#dingtalk-only-mode)

When enabled:

- Login page only shows DingTalk login button
- Native login API is disabled
- Exempt users can still use native login

#### Enterprise Only Mode

[](#enterprise-only-mode)

When enabled:

- Only DingTalk users from specified enterprises can login
- Need to configure allowed enterprise CorpId list
- Users from other enterprises will be rejected

#### Auto Registration

[](#auto-registration)

- **Enabled** (default): New accounts will be created for DingTalk users without linked accounts
- **Disabled**: Users need to register or login with original account first, then bind DingTalk account

### 🔒 Security

[](#-security)

- OAuth flow uses state parameter to prevent CSRF attacks
- Admin API endpoints verify administrator permissions
- All DingTalk API communications use HTTPS

### 📝 Changelog

[](#-changelog)

#### v1.2.0 (2026-02-05)

[](#v120-2026-02-05-1)

- ✨ Added "Show DingTalk Login Button" toggle to control login button visibility
- 🐛 Fixed plugin initialization failure issue
- 🐛 Fixed DingTalk environment detection and H5 auto-login issues
- 🎨 Updated DingTalk official icon
- 💬 Show friendly popup error messages when H5 login fails
- 🌐 Backend error messages internationalization, support Chinese and English

#### v1.0.0 (2026-02-02)

[](#v100-2026-02-02-1)

- 🎉 Initial release

### 🛠️ Development

[](#️-development)

#### Build Frontend Assets

[](#build-frontend-assets)

```
cd js
npm install
npm run build
```

#### Development Watch Mode

[](#development-watch-mode)

```
npm run dev
```

---

📄 License | 许可证
---------------

[](#-license--许可证)

MIT License

🤝 Contributing | 贡献
-------------------

[](#-contributing--贡献)

Welcome to submit Issues and Pull Requests!

欢迎提交 Issue 和 Pull Request！

📞 Support | 支持
--------------

[](#-support--支持)

If you have any questions, please report in [GitHub Issues](https://github.com/jiushutech/flarum-dingtalk-login/issues).

如有问题，请在 [GitHub Issues](https://github.com/jiushutech/flarum-dingtalk-login/issues) 中反馈。

###  Health Score

33

—

LowBetter than 75% of packages

Maintenance82

Actively maintained with recent releases

Popularity4

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity36

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~1 days

Total

3

Last Release

97d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/86b840b420ffd841e68a30ae7047f5ab4b7684ab94df56c752cae92496534840?d=identicon)[jiushutech](/maintainers/jiushutech)

---

Top Contributors

[![jiushutech](https://avatars.githubusercontent.com/u/245651560?v=4)](https://github.com/jiushutech "jiushutech (5 commits)")

---

Tags

AuthenticationSSOoauthlogindingtalkflarum

### Embed Badge

![Health badge](/badges/jiushutech-flarum-dingtalk-login/health.svg)

```
[![Health](https://phpackages.com/badges/jiushutech-flarum-dingtalk-login/health.svg)](https://phpackages.com/packages/jiushutech-flarum-dingtalk-login)
```

###  Alternatives

[maicol07/flarum-ext-sso

SSO for Flarum

468.3k](/packages/maicol07-flarum-ext-sso)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)