How to authenticate logged-in user in Moodle using asp.net core mvc?

Gordana Tasic

I want to create ASP.NET Core MVC app as Moodle External Tool. I created tokens for web services. I know that for Moodle web service is necessary to pass token and web service function name. My question is how to know which user is logged-in in Moodle, and how to get his token or username/password and pass it to Moodle external tool? To get token, i must know username/password, and inversely.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Gordana Tasic2y ago
Thanks for reply. I have this scenario: to create ASP.NET Core MVC app that I will include in Moodle course. Course participants should access the application, which will have one button. At the click of the button, data for that user will be entered in the grid(i will use core_webservice_get_site_info method). And that's why I need a token, to pass it to the api method.

Is this possible to implement?
Tuhin Paul2y ago
There's a trade-off between security and convenience when handling user tokens in an ASP.NET Core MVC app acting as a Moodle External Tool.
- User-Centric: The user logs in to Moodle and retrieves their own token from the user profile page. They then copy and paste the token into your external tool.
- Manual Action: Requires user interaction, which might be inconvenient.
- Ideal Scenario: If Moodle supports a Single Sign-On (SSO) solution like SAML or OpenID Connect, you can leverage that to automatically authenticate the user and obtain their identity without needing username/password or manual tokens. This is the most secure and seamless approach.
- Moodle Compatibility: Requires Moodle to be configured for SSO and your application to be a registered SSO provider.