OAuth2 Facebook Login How To Assistance

[scott]

@patrick Patrick, I made those changes with the same result.

[patrick]

Client Credentials must be checked

[scott]

Ok, I think I have made progress, but I am stuck on the check for existing email part. No matter what I try, the check is not being honored and new users are being created when an existing user is in the database.

The query is:

I have tried as part of the condition using the following:

{{queryname}}
{{queryname.length}}
{{queryname.length>1}}

All of the above skips the Then portion of the condition and goes to the Else portion and inserts a new user.

What is baffling me is that the {{api_fb_login.data.email}} used for the check is also used as part of the insert statement and is inserting the email retrieved from Facebook, so the same value should be returned as part of the earlier check.

[scott]

Ok, I fixed the condition not checking issue by turning off debug in the query that the condition was checking.

So it looks like the final issue with this portion of the process is to auto login the user.

What I have done with no success is in this thread, Register New User and Auto Login on Success.
I put the repeat in the Then statement (which activates when the user has already been inserted and is not a new user):

1. Added a repeat to pull the information from the “check if user exists” query.
2. Added my security provider in the steps
3. Added a security login with the values (email and password - which is salted appropriately)
4. Added a redirect

When I run it, I get unauthorized. The page being directed to is not enforced by the Security Provider Enforcer.

[t11]

It might be that the redirected page does not has the session start.
Try adding this on the redirect page

if (session_status() == PHP_SESSION_NONE) {
    session_start();
}

[scott]

It’s not reaching the redirect page, it is being stopped by the Security Login on the server side.

[t11]

Do you have this somewrhere online? Is it possible to send a screenshot of the server action? Thank you

[scott]

[t11]

The redirect shouldn’t be on the server side action.
Do this.

1. Save this action as a new one (so you have a back up)
2. In this action remove the ‘redirect’ step
3. From the Appconnect -> add the brwowser component
4. On ‘AppConnect’ just add a success step for your ServerAction to browser go to ‘dashboard.php’.

Let me know if you need more details.

Thank you

[scott]

We're not using a ServerAction for the link action. Please see above earlier in the thread.

@patrick

You should not use ServerConnect for that, use a normal link to the facebook login action. With the client credentials flow the authorize step will redirect the page to the facebook login and after the login back to the action file.

<a href="dmxConnect/api/api/facebook/public/insert/login.php">
  Login with Facebook
</a>

At the end of the action as last step place a redirect step that redirects the user back to your page or any other page he should go after the login.

[George]

How are handling the password generation and auto login?

I would suggest to add an extra column to your users table to store the unique Facebook userid and use that as password when doing a social login with server connect.

This way you can have the regular password field editable by the user for usage in regular logins. So you can offer both Facebook login or regular.

[scott]

Hi @George,

I have the password generation set up that way.

The auto login pulls the username (email) and password from the repeat.

[scott]

Just wanted to check in and see if anyone would be able to help me out with the auto login process. I still have not been able to make it work.

[Teodor]

@scott

It’s not reaching the redirect page, it is being stopped by the Security Login on the server side.

Hi Scott, what do you mean? What exactly happens and in which of the two cases - then/else?
I just tested this and it logs in and redirects perfectly fine.

Also why in the else and then steps you have repeat steps and some queryies and not just security provider + register/log in and redirect steps?

Your server action steps should just be:

[scott]

@Teodor, in your setup, how do you define the values for the security login (username/password)? With the repeat, the values are able to be selected. Without the repeat, I am not able to select the values to be used.

[Teodor]

Where do you select your values from?
They must come from your api action step…

This is what you use for logging users in.

[scott]

@Teodor, thank you so much!

I figured out my error now by retracing my steps. I had a security restrict on my “is_user_logged_in” query and that is where the error was coming from. I feel so silly now…

I had created the “is_user_logged_in” query a long time ago and included in my include header file which I rarely look at anymore.

There are many solutions in this thread so I am not sure which to mark as the best one. But I do want to thank everyone who provided assistance!

[Teodor]

So, is everything working fine now?

I will make a tutorial out of the steps explained in this topic will be useful for the other users wondering how to set up this in Wappler.

[scott]

@Teodor,

Yes, everything is working perfect now! I was going to ask if you wanted to do a tutorial for this because I agree, it will be helpful for everyone who wants to integrate a Facebook login in addition to a regular login.

[AdrianoLuiz]

Please tutorial