R – authlogic openid auto_register feature tries to duplicate registration

authlogicauthlogic-oidopenidruby-on-rails

I am trying to enable openid authentication on my website as well as use auto_register feature of latest authlogic_openid add-on.

Everything works fine until second login. The first time user is created and logged in, but after I logout and try logging in into the system with same OpenID identifier I get user registration form with errors saying that username and other fields are already taken and the form is prefilled with values of earlier data passed with openid.

Everything is implemented by authlogic/authlogic openid tutorial except for the user session model with new auto_register call:

class UserSession < Authlogic::Session::Base
  auto_register
end

Any help much appreciated!

Best Answer

It seems like you're registering the users twice. The OpenID plugin doesn't know whether or not a user has been registered it just does SREG every time if auto_register is true. Rather than calling auto_register every time you could look up the user by openid_identifier and send auto_register(true) if they're a new user.

Related Solutions

Ruby-OpenID: Requiring email-address from OpenID provider

As nobody could help me, I helped myself. :-)

The short answer to my question is:

c.required_fields = [:email,"http://axschema.org/contact/email"]

Using this line, the application requests the email-address using sreg and ax (request-type supported by Google).

You can find a more detailed answer and a working implementation of authlogic-openid with the Javascript OpenID-Selector right here:

http://github.com/vazqujav/authlogic_openid_selector_example/

R – Create a new user with new openid login authlogic

acts_as_authentic do |c| 
  c.openid_required_fields = [:email,"http://axschema.org/contact/email"]
end

Will allow you to require an email. I'm unsure of how to require other fields, but maybe check that axschema.org page. There is no need for the user to fill anything out other than their OpenID provider URL.

Combining login and registration could be done with something like this (untested create method from UserSessions controller, like from the authlogic tutorial stuff)

def create
  if User.find_by_openid_provider(params[:user_session]).nil? # or something like that
    @user = User.new(params[:user_session])
    if @user.save
      redirect_to whatever_path
    else
      # handle error
    end
  else
    @user_session = UserSession.new(params[:user_session])
    if @user_session.save
      add_message 'Login successful!'
      redirect_to whatever_path
    else
      render :action => :new
    end
  end
end

Best Answer

Related Solutions

Ruby-OpenID: Requiring email-address from OpenID provider

R – Create a new user with new openid login authlogic

Related Topic