service.tut.pori.users.facebook

Class FacebookUserService

java.lang.Object

service.tut.pori.users.facebook.FacebookUserService

@HTTPService(name="facebook")
public class FacebookUserService
extends java.lang.Object

Facebook User Service method definitions. This class defines the APIs for registering a new account with the system and authentication using Facebook credentials, or more precisely, using the Facebook OAuth 2.0 authentication. The methods also describe the means for granting the system authorization for accessing content of the Facebook account. Creating an account or authenticating with Facebook credentials does not automatically grant the system persistent permissions for accessing the account contents. Note that the Facebook User Service does not contain a method for removing an existing user account. An existing account can be removed using the User Service.

Constructor Summary

Constructors

Constructor and Description
FacebookUserService()

Method Summary

Modifier and Type	Method and Description
Response	authorize(AuthenticationParameter authenticatedUser, StringParameter redirectUri) This method can be used to grant the service access to the authenticated user's Facebook account.
Response	login(AuthenticationParameter authenticatedUser, StringParameter accessToken) This method can be used to authenticate the user using Facebook credentials.
Response	oAuth2Callback(StringParameter authorizationCode, StringParameter errorCode, StringParameter nonce) This method is called by Facebook after user has either denied or granted the service permission to his/her Facebook account, and is not meant to be used directly by the end-users.
Response	register(StringParameter accessToken) This method can be used to register a new user using a Facebook account.
Response	unauthorize(AuthenticationParameter authenticatedUser) This method allows a user to revoke the previously given authorization permissions.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FacebookUserService

public FacebookUserService()

Method Detail

oAuth2Callback

@HTTPServiceMethod(name="oAuth2callback")
public Response oAuth2Callback(@HTTPMethodParameter(name="code",required=false)
                                                                          StringParameter authorizationCode,
                                                                          @HTTPMethodParameter(name="error",required=false)
                                                                          StringParameter errorCode,
                                                                          @HTTPMethodParameter(name="state")
                                                                          StringParameter nonce)

This method is called by Facebook after user has either denied or granted the service permission to his/her Facebook account, and is not meant to be used directly by the end-users. The method implements the OAuth2 authorization process as defined by Facebook.

Parameters:

authorizationCode - OAuth2 authorization code generated by Facebook.

errorCode - Optional error message as reported by Facebook.

nonce - Short-lived nonce value randomly generated by the authorization process.

Returns:

response

login

@HTTPServiceMethod(name="login")
public Response login(@HTTPAuthenticationParameter(required=false)
                                                        AuthenticationParameter authenticatedUser,
                                                        @HTTPMethodParameter(name="access_token")
                                                        StringParameter accessToken)

This method can be used to authenticate the user using Facebook credentials. The external account connection must be created either by registering the user as a new user using Facebook credentials or by authorizing the use of the Facebook account before the login functionality can be used. The passed access token is used to validate the user identity. The token scope should contain at least public_profile, which should be present in each token by default. Additional Facebook OAuth2 scopes can be present, but are not required.

Parameters:

authenticatedUser -

accessToken - OAuth2 access token as provided by Facebook.

Returns:

response

register

@HTTPServiceMethod(name="register")
public Response register(@HTTPMethodParameter(name="access_token")
                                                              StringParameter accessToken)

This method can be used to register a new user using a Facebook account. The passed access token is used to retrieve the required registration details from the account. The token scope should contain at least public_profile, which should be present in each token by default. Additional Facebook OAuth2 scopes can be present, but are not required. The Facebook account is assumed to be personal, and an attempt to use the same account to create multiple accounts will result in an error.

Parameters:

accessToken - OAuth2 access token as provided by Facebook

Returns:

response

authorize

@HTTPServiceMethod(name="authorize")
public Response authorize(@HTTPAuthenticationParameter
                                                                AuthenticationParameter authenticatedUser,
                                                                @HTTPMethodParameter(name="fb_redirect_uri",required=false)
                                                                StringParameter redirectUri)

This method can be used to grant the service access to the authenticated user's Facebook account. This method will redirect to Facebook's consent page asking user's permission to access the account. The default configuration will ask permissions for all Facebook OAuth2 scopes, though the actual scopes required will depend on the services to be used. The authorization process will use the default OAuth2 authentication flow as implemented by Facebook, firstly redirecting the user to the consent page, which in turn will redirect the user back to the OAuth2 callback method. The callback method will either show status message notifying the result of the authorization process or redirect to final target, if redirection URL was provided. The method assumes that Facebook accounts are personal and an attempt to authorize the same Facebook account for multiple users will result in error.

Parameters:

authenticatedUser -

redirectUri - The final target, where the user should be redirected to after successful authorization. If not given, a default status message will be shown.

Returns:

Error response, redirection or default OK response depending on the given parameters.

unauthorize

@HTTPServiceMethod(name="unauthorize")
public Response unauthorize(@HTTPAuthenticationParameter
                                                                    AuthenticationParameter authenticatedUser)

This method allows a user to revoke the previously given authorization permissions. Note that calling this method does not prevent user from authenticating (logging in) using the credentials, nor will it remove the user account from the system, but calling this method will prevent the system from accessing the user's content stored in the Facebook account. In practice this means, that no synchronization can be performed for the account until authorization is restored. All previously synchronized content will be removed from the system.

Parameters:

authenticatedUser -

Returns:

response