Force Login

Mage2Expert Force Login is an extension for Magento 2 that requires visitors to sign in before they can browse your storefront. Once enabled, guests who open a Product, Category, or CMS page — or any custom URL you choose — are redirected straight to the Customer Login page, along with a fully editable alert message explaining why. After signing in, the visitor is returned to the exact page they originally requested, or to the homepage, or to an admin-defined custom URL, depending on your configuration. Restrictions can be scoped independently by page type, forced onto specific URLs through a dedicated admin grid, or lifted for individual pages through an exceptions list — all without writing a single line of code. Every setting is store-view scoped, and the entire redirect mechanism runs as a single plugin registered only in the storefront area, so the Admin panel, REST API, and GraphQL endpoints are completely unaffected. 

Features

• Master Enable / Disable Switch — turn the entire module on or off from Stores → Configuration → Mage2Expert → Force Login without uninstalling. The module ships disabled by default so nothing is restricted until you deliberately turn it on.
• Independent Page-Type Toggles — require login for Product pages, Category pages, and CMS pages separately. Restrict all three, just one, or any combination.
• Custom URL Paths (Link Manager) — a dedicated admin grid under Content → Force Login → Custom URL Paths for forcing login on specific pages regardless of the page-type toggles. Supports inline editing, column filtering, and mass-delete.
• Configurable Post-Login Redirect — choose to return the visitor to the originally requested page, redirect to the homepage, or redirect to a custom URL after a successful sign-in.
• Custom Alert Message — a fully editable notice shown on the Customer Login page when a guest is redirected, so shoppers understand why they need to sign in.
• Exceptions List — keep specific paths, such as an About Us or Contact page, publicly accessible even when their page type is restricted.
• Safe by Default — Customer Login, Create Account, Forgot Password, and Logout pages, along with the Admin panel, always stay reachable, so there is no possibility of a redirect loop.
• Zero Impact on APIs — the redirect plugin is registered only in the frontend area, so REST, GraphQL, and Admin traffic are never intercepted, regardless of configuration.
• Store-View Scope Throughout — every configuration group, including the Custom URL Paths list, supports multi-store and multi-language setups.
• Zero Core Code Modifications — built entirely on Magento's plugin, URL rewrite, and UI component architecture. No class rewrites, no core patches. Safe alongside Magento upgrades and other extensions.

How It Works

After enabling the extension, go to Stores → Configuration → Mage2Expert → Force Login and turn on the page types you want to restrict. When a guest requests a restricted page, the module resolves the request against Magento's own URL rewrite data to detect whether it is a Product, Category, or CMS page, then internally serves the Customer Login form in its place — the browser's address bar still shows the originally requested URL. Once the visitor signs in, Magento's own session redirect mechanism returns them to the page you configured. No reindex, cache flush, or theme change is required for the restriction to take effect beyond the standard configuration cache refresh. 

Custom URL Paths & Exceptions

Not every restricted page fits neatly into Product, Category, or CMS. The Custom URL Paths grid lets you force a login requirement on any relative path — a wholesale catalog page, a members-only landing page, or anything else — independently of the page-type toggles, and takes priority over the Exceptions list if the same path appears in both. Conversely, the Exceptions list lets you keep individual pages public even when their page type is restricted, so a single About Us or Contact page never gets caught by a store-wide CMS restriction. 

Redirect Behavior & Messaging

• Return to Originally Requested Page — the visitor lands exactly back where they started after signing in.
• Redirect to Homepage — the visitor is sent to the store's homepage instead.
• Redirect to Custom URL — the visitor is sent to an admin-defined relative path or absolute URL.
• Custom Alert Message — displayed as a notice on the Customer Login page; leave it empty to show no message at all.

Use Cases

• B2B and wholesale storefronts — hide pricing and catalog details entirely from anonymous visitors until they sign in with an approved trade account.
• Membership and private-sale sites — restrict browsing to registered members only, with a custom message directing new visitors to create an account.
• Pre-launch and invite-only catalogs — force login on a specific set of new product or category pages via the Custom URL Paths grid while leaving the rest of the store public.
• Regional or partner-only sections — restrict selected CMS landing pages while keeping core marketing pages like About Us or Contact publicly accessible via the Exceptions list.
• Multi-store deployments — enforce different login requirements per store view, each with its own page-type toggles, redirect behavior, and message.