One Time Login Plugin
The One Time Login Plugin is for Grav CMS. It generates a one-time login URL to automatically authenticate as an existing user.
Installing the One Time Login plugin can be done in one of two ways. The GPM (Grav Package Manager) installation method enables you to quickly and easily install the plugin with a simple terminal command, while the manual method enables you to do so via a zip file.
GPM Installation (Preferred)
The simplest way to install this plugin is via the Grav Package Manager (GPM) through your system's terminal (also called the command line). From the root of your Grav install type:
bin/gpm install one-time-login
This will install the One Time Login plugin into your
/user/plugins directory within Grav. Its files can be found under
To install this plugin, just download the zip version of this repository and unzip it under
/your/site/grav/user/plugins. Then, rename the folder to
one-time-login. You can find these files on GitHub or via GetGrav.org.
You should now have all the plugin files under
NOTE: This plugin is a modular component for Grav which requires the following:
Before configuring this plugin, you should copy the
user/config/plugins/one-time-login.yaml and only edit that copy.
Here is the default configuration and an explanation of available options:
Defaults plugin to enabled after installation
Defines initial page where otl authentication will occur
Defines base for the OTL link generation. Customize based on your environment.
From the commandline, you can generate one-time login URL's.
$ bin/plugin one-time-login user-login [username]
$ bin/plugin one-time-login uli [username]
Paste the URL into a browser to authenticate as that user.
- If you wish to use the OTL with the admin plugin, you'll need to change the split cookie from
user/config/system.yamlfile. Otherwise, this otl url will only authenticate to the front-facing site and not admin.
- Using an OTL url will bypass 2FA.
- Add a notice about OTL time expirations.