Question

I installed FOSUserBundle and FOSFacebookBundle using this method : How to make a separate url for signin via Facebook using FOSFacebookBundle in Symfony2. Actually I didn’t really understand the whole security thing process, but it is working fine now.

When someone is using facebook signup, I would like the possibility to choose an username before being registred (instead of the facebook id as username)… what I do is that I send a POST parameter to the facebook login route but I can’t find the controller where the registration is being processed.

What would be the best practise ? Where should I retrieve the username (the POST param) and set it ?

Here is my configuration in security.yml :

firewalls:

public:
  pattern: ^/

  fos_facebook:
    app_url: "http://www.appName.com"
    server_url: "http://local.appName.com/app_dev.php/"
    login_path: /login
    check_path: /login_check/facebook
    provider: appName.facebook.provider

  form_login:
    login_path: /login
    check_path: /login_check/form
    provider: fos_userbundle
    csrf_provider: form.csrf_provider  

and here is the routing I use to signup with facebook :

_security_check_facebook:
    pattern: /login_check/facebook

Answer 1

There is no controller processing authentication, ever authentication method add a listener that will trigger on check_path, and do the trick.

Authentication process shouldn’t be responsible to add custom user data. If you followed FOSFacebookBundle documentation you should have a custom user provider that store the user on database, this may confuse a bit but this is not a registration step, is an authentication step. Adding a username is much similar to a profile editing.

To help you i should see your implementation (how do you send post parameter ? ) but you could try something like this:

1. send post parameter to a custom controller (implemented by you)
2. temporary store username (maybe user session data ?)
3. trigger authentication process (this depend on your implementation but essentially we are talking about authenticate on facebook and then post to login_check path)
4. add username at the authenticated user

This could work, but I never did something like this.