xAPI actor session
Opt-in module: open a WordPress learner session from the xAPI actor when a Turbo static page runs inside a same-origin WP2LMS course wrapper.
Setting
Заголовок раздела «Setting»wp-admin/admin.php?page=wp2turbo → Авторизация ученика по xAPI actor
Option key: wp2turbo_settings.enable_xapi_actor_session (default false).
When off: no auto login; Gravity Forms and other features still work as guests.
v1 scope
Заголовок раздела «v1 scope»- Course package under
wp-content/uploadson the same origin as WordPress. - JS reads
parent.ADL.XAPIWrapper.lrs.actor(email frommbox, name fromname). POST /wp-json/wp2turbo/v1/xapi-actor/session→ find-or-createsubscriber/wp2lms_learner→wp_set_auth_cookie.- No HMAC / no
course_wrapperchanges. - Will not log into privileged accounts (admin/editor/author /
edit_posts).
- Entry:
onepix/wp2lms/src/Modules/Turbo/assets/src/xapi-actor-session.js - Loaded on static pages only when the setting is enabled (
StaticAssetCollector+requireXapiActorSession).
Follow-up
Заголовок раздела «Follow-up»Cross-origin Live: postMessage + signed claims + SameSite=None cookies.