How to use org.springframework.social.security.SocialAuthenti cationFilter?

[yuanji]

Thank you Craig.

I also posted my code about Customize Spring Social Connect Framework For MongoDB.

HTH

[blandger]

Hi Graig,

Thanks for the pull request. I will be looking closely at this and get back to you if I have any questions or concerns........

Is there any chance the 'pull' will be merged into master after almost a month ?
Actually I'm interested party for using (patched) spring-social-security module in project. (Although I ran into my own problem in other thread).

[habuma]

Honestly, I thought I had merged it already. I did merge it into my own fork, but I never sent a pull request from my fork to the main project. That has been done now, so it should be there (and will shortly be in a snapshot build). Sorry for the delay.

FWIW, this is all working splendidly for me right now. The only thing remaining to make it complete is to enable it to work alongside the simplified configuration options introduced in Spring Social 1.1.0.M1. I think I have it playing nice with the JavaConfig options. Just a bit more testing there and then I make it work with the XML configuration options. Hope to push a milestone containing this sometime next week, assuming I don't run into any surprises.

[blandger]

Thank you Craig, finally it's done.

I'm trying to create 'canvas app' using Yuan's approach and code base from his excellent blog posts and I'm curious....
1. Is socialAuthenticationFilter can handle security issues for canvas FB web-app ?
2. How properly initialize it for canvas app? Say I have 'web ur = http://site/signin' and 'canvas url = http://site/signin/facebook/'

I added XML snipped into my security.xml as from start post.
I see it is initialized but I don't see it's being called (under debug) although it's contains

filter.setFilterProcessesUrl("/signin/");

I hit the break point in controller's code:

@RequestMapping(value = "/signin/")
   	public String signin(NativeWebRequest request, Model model) {
........

How properly config it and use ? Is it suitable for 'canvas' ?

[blandger]

Honestly, I thought I had merged it already. I did merge it into my own fork, but I never sent a pull request from my fork to the main project. That has been done now, so it should be there (and will shortly be in a snapshot build). ........

Graig, Is it worth to upgrade gradle build file to latest Spring 3.2.0.RELEASE dependency, to be 'line up' with other libraries?

      springVersion = '3.2.0.RELEASE' //'3.1.3.RELEASE'
      springSecurityVersion = '3.1.3.RELEASE'

It compiles fine, tests don't fail, should run fine (I hope).

[blandger]

I'm trying to create 'canvas app' using Yuan's approach and code base from his excellent blog posts and I'm curious....
1. Is socialAuthenticationFilter can handle security issues for canvas FB web-app ?
2. How properly initialize it for canvas app? Say I have 'web ur = http://site/signin' and 'canvas url = http://site/signin/facebook/'
[/code]
I hit the break point in controller's code:

       @RequestMapping(value = "/signin/")
   	public String signin(NativeWebRequest request, Model model) {
          .........
   	private String getAuthorizationUrl(NativeWebRequest request) {
           ConnectionFactory<Facebook> connectionFactory = connectionFactoryLocator.getConnectionFactory(Facebook.class);
           String authUrl = connectSupport.buildOAuthUrl(connectionFactory, request);// + "%2Ffacebook";
            ........

Is anybody have good experience using SocialAuthenticationFilter for canvas FACEBOOK application ?

After tweaking parameters:
- on facebook developer app settings page (web-site URL + Canvas URL)

different setting for filter like:
- setFilterProcessesUrl(.. , filter.setSignupUrl(.. , filter.setPostLoginUrl(...

- adding internal controller + page with JS 'redirect' to FB auth url for getting 'app permissions' and redirecting back to 'web-app'

I still can't understand how that stuff can (or should) be configured for canvas app authentication + spring security.

[habuma]

As I explained in a separate thread, the proper flow for FB canvas apps to receive an access token is very different from how either ProviderSignInController or SocialAuthenticationFilter work. Although I believe it is possible to use either PSIC or SAF with canvas, it's not the correct approach. I outlined what the correct approach should be in the other thread at http://forum.springsource.org/showth...le-forthcoming.

[habuma]

Graig, Is it worth to upgrade gradle build file to latest Spring 3.2.0.RELEASE dependency, to be 'line up' with other libraries?

It shouldn't hurt, but I've not yet tried it with 3.2.0.RELEASE (I'm trying to maintain 3.1.x compatibility for now). If you run into any troubles with 3.2.0, let me know (by opening a bug issue in JIRA) and I'll take a look.