Customer Force Login
A Magento 2 module that forces visitors to log in before accessing the site, with configurable whitelist rules.
What is Customer Force Login?
bitExpert/magento2-force-login is a Magento 2 extension that forces website visitors to log in before accessing any page, unless the page is explicitly whitelisted. It solves the need for merchants to restrict site access to specific user groups, such as business partners or registered customers, ensuring only authorized users can view the catalog or content.
Magento 2 store administrators and developers who need to create private or B2B-focused e-commerce sites where public browsing is not allowed.
Developers choose this module because it provides a robust, configurable access control solution native to Magento 2, with a user-friendly admin GUI for whitelist management, multistore support, and compatibility with modern frontends like Hyvä Themes.
Overview
Force Customer Login Module for Magento 2
Use Cases
Best For
- Creating private Magento stores for enterprise business partners
- Restricting product catalog access to registered customers only
- Building B2B e-commerce sites with mandatory login
- Implementing whitelist-based public page exceptions in a private store
- Adding granular access control to Magento multi-store setups
- Securing Magento sites where guest browsing is not desired
Not Ideal For
- E-commerce sites requiring extensive public SEO content without login barriers
- Projects needing dynamic user role permissions beyond simple guest authentication
- Teams looking for plug-and-play solutions without Magento admin configuration
- High-traffic stores where regex-based request filtering could cause performance issues
Pros & Cons
Pros
Supports regex patterns and GUI-based rule creation, allowing precise control over public pages, as shown in the strategies section for static and regex rules.
Built-in Magento admin interface for easy whitelist management, accessible via the Customers menu, with an intuitive grid and form for adding entries.
Configurable per store or globally, fitting Magento's multi-store architecture without extra setup, as mentioned in the multistore-support feature.
Restricts whitelist admin access to specific backend groups, preventing unauthorized changes, which is highlighted in the ACL integration feature.
Ensures smooth operation with modern Hyvä frontends, as explicitly stated in the README, making it suitable for contemporary Magento developments.
Cons
Requires technical expertise to set up regex rules correctly, which can lead to errors if misconfigured, and the strategies like RegEx-All add complexity.
Only handles guest vs. logged-in users; it doesn't provide role-based access control after login, focusing solely on authentication without authorization.
Regex matching on every request adds overhead, and the installation process requires cache flushing, indicating potential slowdowns on busy sites.
Involves multiple CLI commands (enable, compile, upgrade, flush cache) and can have Composer errors, making setup more involved than simpler modules.
Frequently Asked Questions
Related Projects
Menu EditorProvides powerful menu editor to replace category based menus in Magento 2
Custom SMTPConfigure Magento 2 to send email using Google App, Gmail, Amazon Simple Email Service (SES), Microsoft Office365 and many other SMTP (Simple Mail Transfer Protocol) servers
Disable Stock ReservationThis module disables the inventory reservation logic introduced as part of MSI in Magento 2.3.3
Sentry.ioMagento 2 module to log to Sentry
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.