Перейти к содержимому

xAPI actor session

Opt-in module: open a WordPress learner session from the xAPI actor when a Turbo static page runs inside a same-origin WP2LMS course wrapper.

wp-admin/admin.php?page=wp2turbo → Авторизация ученика по xAPI actor
Option key: wp2turbo_settings.enable_xapi_actor_session (default false).

When off: no auto login; Gravity Forms and other features still work as guests.

  • Course package under wp-content/uploads on the same origin as WordPress.
  • JS reads parent.ADL.XAPIWrapper.lrs.actor (email from mbox, name from name).
  • POST /wp-json/wp2turbo/v1/xapi-actor/session → find-or-create subscriber / wp2lms_learner → wp_set_auth_cookie.
  • No HMAC / no course_wrapper changes.
  • Will not log into privileged accounts (admin/editor/author / edit_posts).
  • Entry: onepix/wp2lms/src/Modules/Turbo/assets/src/xapi-actor-session.js
  • Loaded on static pages only when the setting is enabled (StaticAssetCollector + requireXapiActorSession).

Cross-origin Live: postMessage + signed claims + SameSite=None cookies.