Htykuut

Here's my routing.yml:

hwi_oauth_redirect:

  resource: "@HWIOAuthBundle/Resources/config/routing/redirect.xml"

  prefix:   /connect



hwi_oauth_connect:

  resource: "@HWIOAuthBundle/Resources/config/routing/connect.xml"

  prefix:   /connect



hwi_oauth_login:

  resource: "@HWIOAuthBundle/Resources/config/routing/login.xml"

  prefix:   /login



elama.facebook_login:

  path: /login/check-facebook



#the rest of the file are my services

Here's my complete security.yml:

security:

    providers:

      database:

        id: elama.user.user_provider



    firewalls:

        dev:

          pattern: ^/(_(profiler|wdt)|css|images|js)/

          security: false



        private_api:

          pattern: ^/private_api/

          security: false



        client_area:

          context: client_area

          provider: database

          pattern:   ^/

          anonymous: ~

          elama: true

          logout:

            path:   /logout

            target: /

            success_handler: elama.auth_event_listener



          oauth:

            resource_owners:

              facebook:           "/login/check-facebook"

            login_path:        /login

            use_forward:       false

            failure_path:      /login?failed=true



            oauth_user_provider:

              service: 'elama.user.user_provider'



    access_control:

      - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }

      - { path: ^/system, roles: [ROLE_ADMIN, ROLE_CONTROL_PANEL_USERS] }



    role_hierarchy:

      ROLE_ADMIN: [ROLE_ALPHA, ROLE_BETA]

and in my config.yml I have following section:

hwi_oauth:

  firewall_names: [client_area]

  resource_owners:

    facebook:

      type:                facebook

      client_id:           '%hwioauth.facebook.client_id%'

      client_secret:       '%hwioauth.facebook.client_secret%'

      options:

        csrf: true

        display: popup #dialog is optimized for popup window

        auth_type: rerequest # Re-asking for Declined Permissions

When I go to https://my_host/connect/facebook I get the Facebook auth page which when submitted redirects me to /login?failed=true#_=_. To rule the UserNotFoundException out of equation I've made my elama.user.user_provider service (which implements required OAuthAwareUserProviderInterface interface) return real existing user instance (hardcoded to force return user instance), but that didn't help. UPDATE: That failing was because I missed the type of object I was returning from loadUserByOAuthUserResponse: it was custom User object, not compliant with UserInterface.

My aim is to get following user workflow:

1. In profile page user can attach Facebook account to his existing
   system account (how do I do that? which route should I
   implement/edit?)


2. On login page user can authenticate with Facebook and if he already has that account attached to hist system account - log him
   in. If not, check whether we have system user account with same
   email as provided by Facebook: if there's one - refuse in
   authentication and kindly ask to login as system account and bind FB
   account from inside; if there's none - create system account,
   bind to FB and log user in. How do I do that? Where do I start?
   Which parts are already handled by HWIOAuthBundle?