oauth facebook with grails accessing token

Question

Its a grails project,
Facebook authentication is successful via oauth,
Now when it comes back to my controller, I want to get emailID of the logged in user,
Searched a lot, but did not find proper documentation,
I am using scribe and have following code in Config.groory

import org.scribe.builder.api.FacebookApi

oauth {
providers {
    facebook {
        api = FacebookApi
        key = 'xxxx'
        secret = 'yyyy'
        callback = "http://my-domain-name-here:8080/TestOAuth2/dashBoard/facebooklogin"
        successUri = "http://my-domain-name-here:8080/TestOAuth2/dashBoard/success"
    }
}
}

Any help much appreciated.
Thanks.

Answer 1

Try this..,.

Config:

import org.scribe.builder.api.FacebookApi
...
oauth {
  providers {
    facebook {
      api = FacebookApi

      key = 'XXX'
      secret = 'YYY'

      scope = 'email,read_stream,publish_actions,user_birthday,publish_stream'

      callback = "http://localhost:8080/appName/oauth/facebook/callback"   //callback to oauth controller of oauth plugin

      successUri = "http://localhost:8080/appName/myController/facebookSuccess"
      failureUri = "http://localhost:8080/appName/myController/facebookFailure"
    }
  }
}

MyController:

def facebookSuccess() {
    Token facebookAccessToken = (Token) session[oauthService.findSessionKeyForAccessToken('facebook')]
    def facebookResource = oauthService.getFacebookResource(facebookAccessToken, "https://graph.facebook.com/me")
    def facebookResponse = JSON.parse(facebookResource?.getBody())

    log.info "Email = ${facebookResponse.email}"
    ...
}

You can get working example from my git repo. Grails Oauth Plugin Demo.

Answer 2

Email is not part of a Facebook public_profile. The only way to get the users e-mail address is to request extended permissions on the email field. You can do this by adding a scope to the oauth provider.

config.groovy

oauth {
   providers {
      facebook { 
          api = org.scribe.builder.api.FacebookApi
          scope = 'email'
          ...
          ...
      } 
   }
}

As an example of how to return email and various public_profile fields please see below. Take Note of: getFacebookResource params e.g. https://graph.facebook.com/me?fields=id,name,verified,age_range,email"

import grails.converters.JSON
import org.scribe.model.Token
import grails.plugin.springsecurity.oauth.OAuthToken

class SpringSecurityOAuthController {

   def oauthService

   def onSuccess = {
      // Validate the 'provider' URL. Any errors here are either misconfiguration
      // or web crawlers (or malicious users).
      if (!params.provider) {
        renderError 400, "The Spring Security OAuth callback URL must include the 'provider' URL parameter."
        return
      }

      def sessionKey = oauthService.findSessionKeyForAccessToken(params.provider)
      if (!session[sessionKey]) {
          renderError 500, "No OAuth token in the session for provider '${params.provider}'!"
          return
      }

      // Create the relevant authentication token and attempt to log in.
      OAuthToken oAuthToken = createAuthToken(params.provider, session[sessionKey])

      Token facebookAccessToken = (Token) session[oauthService.findSessionKeyForAccessToken('facebook')]

      def facebookResource = oauthService.getFacebookResource(facebookAccessToken ,    "https://graph.facebook.com/me?fields=id,name,verified,age_range,email")

      def facebookResponse = JSON.parse(facebookResource?.getBody())

      println facebookResponse

      ...
      ...
    }
}

public_profile (Default)

A person's public profile refers to the following properties on the user object by default:

• id cover
• name
• first_name
• last_name
• age_range
• link
• gender
• locale
• picture
• timezone
• updated_time
• verified