Devise-twitter adds Sign in via Twitter and Connect your account to Twitter functionality to your devise app.
It requires at least Devise 1.1 and ONLY works with Rails 3.
Devise-twitter currently supports Sign in via Twitter and Connect your account to Twitter, but no proper API for Connect your account to Twitter exists so far.
This plugin is in use in an upcoming product and continues to be improved.
Simply add devise-twitter to your Gemfile and bundle it up:
gem 'devise-twitter'
Run the generator, supplying the name of the model (e.g. User)
$ rails generate devise:twitter user
Add your OAuth credentials to config/initializers/devise_twitter.rb
Devise::Twitter.setup do |config|
config.consumer_key = <YOUR CONSUMER KEY HERE>
config.consumer_secret = <YOUR CONSUMER SECRET HERE>
config.scope = :user
end
Modify your user model like so
class User < ActiveRecord::Base
# To use devise-twitter don't forget to include the :twitter_oauth module:
# e.g. devise :database_authenticatable, ... , :twitter_oauth
# IMPORTANT: If you want to support sign in via twitter you MUST remove the
# :validatable module, otherwise the user will never be saved
# since it's email and password is blank.
# :validatable checks only email and password so it's safe to remove
# Include default devise modules. Others available are:
# :token_authenticatable, :confirmable, :lockable and :timeoutable
devise :database_authenticatable, :registerable,
:recoverable, :rememberable, :trackable :twitter_oauth
# Setup accessible (or protected) attributes for your model
attr_accessible :email, :password, :password_confirmation, :remember_me
end
Modify the generated routes (in config/routes.rb) to your liking
Application.routes.draw do
devise_for :user do
match '/user/sign_in/twitter' => Devise::Twitter::Rack::Signin
match '/user/connect/twitter' => Devise::Twitter::Rack::Connect
end
...
Run the generated migration
$ rake db:migrate
When signing in via Twitter, after authorizing access on www.twitter.com, devise-twitter will sign in an existing user or create a new one, if no user with these oauth credentials exists.
Devise-twitter supports adding Twitter credentials to an existing user account (e.g. one that registered via email/password) but currently the API to expose this feature is far from perfect:
After navigating to /user/connect/twitter and authorizing access on
www.twitter.com, devise-twitter checks if there is another user with the same
twitter handle. If not devise-twitter adds twitter handle and oauth credentials
to the current user and saves.
If another user with the same twitter handle is found devise-twitter sets the
session variable warden.user.twitter.connected_user.key to the id of this
user. Your application can check if this variable is set and display an option
to merge the two users.
if connected_user = session['warden.user.twitter.connected_user.key'].present?
connected_user = User.find(connected_user)
# Ask user if she/he wants to merge her/his accounts
# (or just go ahead and merge them)
end
If you have any idea how to improve it, please message me.
The generated migration adds three fields to your user model:
change_table(:users) do |t|
t.column :twitter_handle, :string
t.column :twitter_oauth_token, :string
t.column :twitter_oauth_secret, :string
end
add_index :users, :twitter_handle, :unique => true
add_index :users, [:twitter_oauth_token, :twitter_oauth_secret]
Currently the names of these fields are hard coded, but making them customizable is on the roadmap.
Thanks to
- Daniel Neighman for creating warden, the framework Devise uses
- Jose Valim for creating Devise
- Pelle Braendgaard for implementing oauth support in Ruby
- Roman Gonzalez for creating warden_oauth, the framework devise-twitter uses
- all the other giants who's shoulders this project stands on
- Code:
git clone http://github.com/MSch/devise-twitter - Bugs: http://github.com/MSch/devise-twitter/issues
- Gems: http://rubygems.org/gems/devise-twitter