xwiki-contrib / xwiki-social-login

Login to your XWiki from social sites (FB, Twitter, Foursquare, etc.). Based on socialauth

See http://extensions.xwiki.org/xwiki/bin/view/Extension/Social+Login+Application.

xwiki-social-login's Issues

Failed to setup

I installed the extension through the extension manager, followed the steps indicated in the README of this Github project, generating a oauth_consumer.properties file in my WEB-INF folder with the key and secret for my Google account (no other property is set, I commented them out since I won't use any other service).

In the admin section I enabled the social login buttons, and added the login template, as I set the providers to "Google".

I reset Tomcat but I don't see the login buttons. I played with the template and this is what I see:

$services is an instance of org.xwiki.script.internal.service.DefaultScriptServiceManager as expected.
$services.socialAuth is undefined.

What am I missing?

Link service to existing account

It would be awesome to be able to link an existing account with a service. For instance, I have plenty of accounts created prior to the existence of this plugins, I would like to allow my users to use their corporate email (Google Apps) to login...

A nice way to get this done would be to search for another user with the same email, at lest in those services where the emails is verified, and therefore, trustworthy (facebook, google, so on)

So far the only way I could get this done is by manually creating the object in the user and setting all fields, clearly not scalable...

Class not found exception

May be installation instruction is missing something but I'm constantly getting this error :
Extension is installed successfully. There is a jar file with this class but it desn't work.

2013-07-27 21:11:29,941 [http://localhost:8080/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=facebook&xredirect=/xwiki/bin/register/XWiki/Register] INFO .HibernateDataMigrationManager - Storage schema updates and data migrations are enabled
2013-07-27 21:11:29,985 [http://localhost:8080/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=facebook&xredirect=/xwiki/bin/register/XWiki/Register] INFO .HibernateDataMigrationManager - No data migration to apply for database [xwiki] currently in version [43000]
2013-07-27 21:11:29,985 [http://localhost:8080/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=facebook&xredirect=/xwiki/bin/register/XWiki/Register] INFO .HibernateDataMigrationManager - Checking Hibernate mapping and updating schema if needed for wiki [xwiki]
2013-07-27 21:11:42,646 [http://localhost:8080/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=facebook&xredirect=/xwiki/bin/register/XWiki/Register] WARN c.x.x.XWiki - Failed to initialize AuthService org.xwiki.social.authentication.internal.SocialAuthServiceImpl using Reflection, trying default implementations using 'new'.
java.lang.ClassNotFoundException: org.xwiki.social.authentication.internal.SocialAuthServiceImpl
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1714) ~[catalina.jar:7.0.42]
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1559) ~[catalina.jar:7.0.42]
at java.lang.Class.forName0(Native Method) ~[na:1.7.0_25]
at java.lang.Class.forName(Class.java:190) ~[na:1.7.0_25]
at com.xpn.xwiki.XWiki.getAuthService(XWiki.java:4923) [xwiki-platform-legacy-oldcore-5.1.jar:na]
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3729) [xwiki-platform-legacy-oldcore-5.1.jar:na]
at org.xwiki.security.authorization.internal.XWikiCachingRightService.getCurrentUser(XWikiCachingRightService.java:229) ~[xwiki-platform-security-bridge-5.1.jar:na]
at org.xwiki.security.authorization.internal.XWikiCachingRightService.checkAccess(XWikiCachingRightService.java:306) ~[xwiki-platform-security-bridge-5.1.jar:na]
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3742) [xwiki-platform-legacy-oldcore-5.1.jar:na]
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4773) [xwiki-platform-legacy-oldcore-5.1.jar:na]
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:233) ~[xwiki-platform-legacy-oldcore-5.1.jar:na]
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:128) ~[xwiki-platform-legacy-oldcore-5.1.jar:na]
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) ~[struts-1.2.9.jar:1.2.9]
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) ~[struts-1.2.9.jar:1.2.9]
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) ~[struts-1.2.9.jar:1.2.9]
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) ~[struts-1.2.9.jar:1.2.9]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:621) ~[servlet-api.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:728) ~[servlet-api.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:120) ~[xwiki-platform-legacy-oldcore-5.1.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at org.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:144) ~[xwiki-platform-wysiwyg-server-5.1.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:66) ~[xwiki-platform-webdav-server-5.1.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:208) ~[xwiki-platform-container-servlet-5.1.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:111) ~[xwiki-platform-container-servlet-5.1.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123) ~[catalina.jar:7.0.42]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) ~[catalina.jar:7.0.42]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99) ~[catalina.jar:7.0.42]
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953) ~[catalina.jar:7.0.42]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) ~[catalina.jar:7.0.42]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) ~[catalina.jar:7.0.42]
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1023) ~[tomcat-coyote.jar:7.0.42]
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589) ~[tomcat-coyote.jar:7.0.42]
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310) ~[tomcat-coyote.jar:7.0.42]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) ~[na:1.7.0_25]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) ~[na:1.7.0_25]
at java.lang.Thread.run(Thread.java:724) ~[na:1.7.0_25]

Unable to login with Google

I have a nearly identical configuration and problem as this user reported online here.

I'm running xwiki Enterprise v8.3 on 64-but Ubuntu 16.04. I followed all instructions exactly for installing and enabling the Social Login Application here.

When I click "Login with Google", the link goes nowhere and the URI contains:
"?sl_provider=google&xredirect=/xwiki/bin/view/Main/?srid=xXxXxXxX",

I have verified my domain with Google and have valid credentials. Am I doing something incorrectly or is this plugin not functioning on xwiki v8.3?

Plugin ignores registration restrictions

Even if I set the rights of "Unregistered Users" to forbid registration (private wiki), anyone can attempt to login through the social auth and register a new user that way, effectively bypassing the access control.

This is a serious security issue, I'm disabling the plugin until this is fixed.

Users that have signed in with their Facebook account cannot sign out

I have tested the social login with a 3.5.1 version of XE. The sign out works fine for users created with XWiki, but fails for users who are signed into Facebook (the page is reloaded and the user is re-authenticated). Any ideas why this happens?