Associated roles table not returned

[monsurhoq]

I am using ADmad/CakePHP-HybridAuth with dereuromark/cakephp-tinyauth with multi role facility. I wrote following code in my AppController.php:

    $this->loadComponent('TinyAuth.Auth', [
            'autoClearCache' => true,
            // followings are common setting for auth component
            'authenticate' => [
                 'Form' => [
                    'finder' => 'auth'
                 ],
                 'ADmad/HybridAuth.HybridAuth' => [
                    'fields' => [
                        'provider' => 'provider',
                        'openid_identifier' => 'openid_identifier',
                        'email' => 'email'
                    ],
                    'profileModel' => 'ADmad/HybridAuth.SocialProfiles',
                    'profileModelFkField' => 'user_id',
                    'hauth_return_to' => ['controller' => 'Users', 'action' => 'index', 'prefix' => false, '_ext' => null],
                ]
            ],
            'loginAction' => [
                'controller' => 'Users',
                'action' => 'login',
                'prefix' => false
            ],
            'loginRedirect' => [
                'controller' => 'Users',
                'action' => 'index',
                'prefix' => false
            ],
            'logoutRedirect' => [
                'controller' => 'Users',
                'action' => 'login',
                'prefix' => false
            ],
            'flash' => [
                'element' => 'error',
                'key' => 'auth'
            ],
            // using bootstrap ui for flash element
            'flash' => [
                'element' => 'error',
                'key' => 'auth'
            ],
            'authorize' => [
                // check authorization using TinyAuth based on config/acl.ini settings
                'TinyAuth.Tiny' => [
                    'multiRole' => true,
                    'autoClearCache' => true,
                    'superAdminRole' => '01',
                    'rolesTable' => 'roles',
                    'pivotTable' => 'roles_users'
                ]
            ]
         ]);

When I try to login using form it returns associated roles, but when try to login using HybridAuth not returned the roles. FYI, authentication and authorization works for both case.

I am using CakePHP 3.3.5. I also try using contain, which have been deprecated as of 3.1, but no roles return for HybridAuth. I also try my custom finder findAuth for HybridAuth, no change.

FYI, when I save new user using \Cake\Event\EventManager::instance()->on('HybridAuth.newUser', [$this, 'createUser']);, my associated roles saved successfully.

How can I retrieve roles using HybridAuth?

[ADmad]

I see you have added 'finder' => 'auth' for your Form authenticator, why haven't you done the same for ADmad/HybridAuth.HybridAuth's config?

[monsurhoq]

I also try that, I told on my message.

[ADmad]

I told on my message.

Not clear enough :) All you said was HybridAuth does not return roles.

[monsurhoq]

I am using CakePHP 3.3.5. I also try using contain, which have been deprecated as of 3.1, but no roles return for HybridAuth. I also try my custom finder findAuth for HybridAuth, no change.

Yes, HybridAuth does not return roles using 'finder' => 'auth' in ADmad/HybridAuth.HybridAuth's config

[ADmad]

HybridAuth does take the finder into account.

[monsurhoq]

This my new code:

        $this->loadComponent('TinyAuth.Auth', [
            'autoClearCache' => Configure::read('debug'),
            // followings are common setting for auth component
            'authenticate' => [
                 'Form' => [
                    'finder' => 'auth'
                 ],
                 'ADmad/HybridAuth.HybridAuth' => [
                    'fields' => [
                        'provider' => 'provider',
                        'openid_identifier' => 'openid_identifier',
                        'email' => 'email'
                    ],
                    'profileModel' => 'ADmad/HybridAuth.SocialProfiles',
                    'profileModelFkField' => 'user_id',
                    'hauth_return_to' => ['controller' => 'Users', 'action' => 'index', 'prefix' => false, '_ext' => null],
                    'finder' => 'auth'
                ]
            ],
            'loginAction' => [
                'controller' => 'Users',
                'action' => 'login',
                'prefix' => false
            ],
            'loginRedirect' => [
                'controller' => 'Users',
                'action' => 'index',
                'prefix' => false
            ],
            'logoutRedirect' => [
                'controller' => 'Users',
                'action' => 'login',
                'prefix' => false
            ],
            'flash' => [
                'element' => 'error',
                'key' => 'auth'
            ],
            // using bootstrap ui for flash element
            'flash' => [
                'element' => 'error',
                'key' => 'auth'
            ],
            'authorize' => [
                // check authorization using TinyAuth based on config/acl.ini settings
                'TinyAuth.Tiny' => [
                    'multiRole' => true,
                    'autoClearCache' => true,
                    'superAdminRole' => '01',
                    'rolesTable' => 'roles',
                    'pivotTable' => 'roles_users'
                ]
            ]
         ]);

And this my finder in UsersTable.php

    public function findAuth(\Cake\ORM\Query $query, array $options)
    {
        $query
            ->contain(['Roles'])
            ->where(['Users.isactive' => 1,'Users.activationkey IS' => null]);

        return $query;
    }

Roles not return.

[ADmad]

You can step through the code and check whether the finder you set is being used at the line i linked.

[monsurhoq]

That block executed, when a new user try to login with hybridauth first time. But when user information save into database, after then when same user try to login using hybridauth, that block not executed.

        if ($profile && !empty($profile->user)) { // this is for old user
            $user = $profile->user;
            $profile->unsetProperty('user');
        } elseif ($providerProfile->email) { // this is for new user
            pr($config['finder']);
            $user = $this->_userModel->find($config['finder'])
                ->where([
                    $this->_userModel->aliasField($config['fields']['email']) => $providerProfile->email
                ])
                ->first();
            pr($user);
            die();
        }

[ADmad]

Okay, I see the problem. Will make a fix.

[ADmad]

I have made a new release with the fix.

[monsurhoq]

Thanks. It is working now.