Updated OmniAuth: Overview (markdown)
Making FB user schema match the User.create example.
update text for fix of security issue
remove section about passthru. see https://github.com/plataformatec/devise/issues/2386
clarify what is required in the user model
clarify google instructions
Added the certified gem option for the SSL error (helped me a lot!)
The `omniauth_providers` array is used to build the constraints on the :providers parameter of the `user_omniauth_authorize_path` Without this list on `User` the routes mentioned in this overview will error out.
Included instructions for developers using OS/X to bypass certificate verification in the development environment
Gem oauth2 does not need to be required directly since omniauth-facebook depends on it and it will be installed anyway.
Changed `users/sessions#new` into `devise/sessions#new`. Same for `#destroy`. There is no Users::SessionsController.
Fix initial Gemfile where we add OmniAuth OAuth
explained process of adding required columns to User table.
Adding specific mention of what "our model" is referencing.
Added a check at new_with_session on whether the email was blank or not. otherwise the user will not be able to change the email used for registration.
indd
Fix of security issue...
if you bang the user creation, the else case of @user.persisted? in Users::OmniauthCallbacksController#facebook will never be called.
Revert 266864b9aeb6396cb46f861916a8f7b094ac8751^ ... 266864b9aeb6396cb46f861916a8f7b094ac8751
Destroyed OmniAuth: Overview (markdown)
When using the Google code sample (but with my corporate OpenID provider) I found that I didn't get redirected back to the protected page after login. It turned out that :verify_authenticity_token was wiping my session because no token was present. But I don't think the OpenID server will ever send a token.