Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need explanation as to what route 'fp_openid_security_check' is #66

Open
dotstormz opened this issue Jan 28, 2013 · 4 comments
Open

Need explanation as to what route 'fp_openid_security_check' is #66

dotstormz opened this issue Jan 28, 2013 · 4 comments

Comments

@dotstormz
Copy link

Hi,

I am attempting to implement openid with FOSUserBundle.

In the finishOpenIdLoginAction() method in the SecurityController the finishOpenIdLogin.html.twig template creation is obvious, however the 'fp_openid_security_check' route upon success is not explained anywhere. Is this just meant to post back to itself, or is there some code missing from the documentation for this route?

Thanks in advance@

@makasim
Copy link
Contributor

makasim commented Jan 28, 2013

You would come to finishOpenIdLoginAction only when you have AuthenticatedException. The exception was thrown while processing openid provider response.

  • It could be OpenIdAuthenticationCanceledException if the user canceled login at provider side.
  • Some other exceptions could be thrown from UserProvider if it failed.

You would like to recover second types of errors (those come from UserProvider). So you have to create a user. After you can ask security to check auth credentinals one more time, and be able to finish the auth successfully. The result of success auth: you have SecurityContenxt populated with OpenIdToken token

@dotstormz
Copy link
Author

Can you give an example of this check in the documentation?

@dotstormz
Copy link
Author

for example... how is RecoveredFailureRelyingParty::RECOVERED_QUERY_PARAMETER => 1 used?

@makasim
Copy link
Contributor

makasim commented Feb 4, 2013

Can you give an example of this check in the documentation?

good idea.

for example... how is RecoveredFailureRelyingParty::RECOVERED_QUERY_PARAMETER => 1 used?

I dont think it should be explained. It is more like internals and for basic usage it is enough to tell what should you return. It is possible to look at the class RecoveredFailureRelyingParty if someone want to dive in.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants