django-socialprofile 1.2.1

Add INSTALLED_APPS

Add social_auth and socialprofile to installed applications:

    INSTALLED_APPS = (
    ...
    'social.apps.django_app.default',
    'socialprofile',
)

Add urls to urls.py

In your urls.py, you need to pull in the socialprofile urls:

# Social Profiles
url(r'^socialprofile/', include('socialprofile.urls')),

The python-socialauth urls get pulled in by socialprofile as /socialprofile/socialauth/.

Configure python-socialauth

All of the configuration for python-socialauth applies to this module, although the supplied templates only cover Google, Facebook, and Twitter. python-socialauth can handle a huge number of backends, you can customize as needed.

• Setup your backends:

      # Python Socialauth Settings
      AUTHENTICATION_BACKENDS = (
      'django.contrib.auth.backends.ModelBackend',  # Leave Enabled for Admin Access
      'social.backends.twitter.TwitterOAuth',
      'social.backends.facebook.Facebook2OAuth2',
      'social.backends.google.GoogleOAuth2',
  )

• Set up what page to go to post-authentication:

  SOCIAL_AUTH_LOGIN_REDIRECT_URL = '/secure/'
  SOCIAL_AUTH_NEW_USER_REDIRECT_URL = '/secure/'
  SOCIAL_AUTH_NEW_ASSOCIATION_REDIRECT_URL = '/secure/'

• Set up the redirects for forcing auth on the way to other pages:

  # Core Authentication Settings
  LOGIN_URL          = '/socialprofile/select/'
  LOGIN_REDIRECT_URL = '/secure/'
  LOGIN_ERROR_URL    = '/socialprofile/select/'

Register for your API Keys

SOCIAL_AUTH_TWITTER_KEY         = ''
SOCIAL_AUTH_TWITTER_SECRET      = ''
SOCIAL_AUTH_FACEBOOK_KEY        = ''
SOCIAL_AUTH_FACEBOOK_SECRET     = ''
SOCIAL_AUTH_FACEBOOK_SCOPE      = ['public_profile', 'email']
SOCIAL_AUTH_FACEBOOK_PROFILE_EXTRA_PARAMS = {'fields': 'first_name,last_name,gender,picture,link'}
SOCIAL_AUTH_GOOGLE_OAUTH2_KEY   = ''
SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET = ''
SOCIAL_AUTH_GOOGLE_OAUTH_SCOPE  = ['https://www.googleapis.com/auth/userinfo.profile',]

Login Modal Layer

The ‘socialprofile/select’ view provides a login modal that you can use to both force existing users to sign in as well as to enable new users to select how they want to authenticate to the site.

If you have LOGIN_URL set to /socialprofile/select/, this will work automatically.

The default template has attributes to make this a nice modal using jQueryMobile, but the HTML is straightforward, and a custom template should be simple to create.

Self Profile View

The socialprofile/ view lets a user see their own profile. The default template checks to see if they profile is indeed theirs, and displays an ‘edit’ button taking them to the socialprofile/edit/ view.

This view supports a ?returnTo= parameter to specify a URL path to return to once the user is done. The default template uses this for the < Return button.

Other Profile View

The socialprofile/view/<username> view lets a user see any profile. You may want to adjust the template to hide any profile fields that should not be public.

This view supports a ?returnTo= parameter to specify a URL path to return to once the user is done. The default template uses this for the < Return button.

Profile Edit View

The socialprofile/edit/ view lets a user edit their own profile. In typical Django fashion, a GET request to this view will display the form, while a POST request to this view will try and save the changes.

This view supports a ?returnTo= parameter to specify a URL path to return to once the user is done. The default template uses this for the Cancel and Done button. When the form returns to the Self Profile View, it passes returnTo.

Profile Add Auth Type

A user can add an additional social authentication type to their existing profile. If they originally created their profile using Google auth, then they could add Facebook and Twitter, enabling them to sign in with any of those services and access the same account.

To do this, just have the customer log in with their new auth type, and python-socialauth will do the rest.

Profile Delete Auth Type

This is a default feature of python-socialauth, and is available using:

{% url "social:disconnect" user_social_auth.provider %}

… in a template.

Delete Account

It is important to let customers remove their accounts, and the /socialprofile/delete view prompts them to ensure they really want to delete their account before sending them to /socialprofile/delete/action?confirm=true.

You may want to provide your own function to do this, that perhaps only deactivates their account.