Spring Security: Multiple Logins to the same resources: Form Login + Facebook Connect (uid, sessionKey)

Question

To begin I know about

http://blog.kadirpekel.com/2009/11/09/facebook-connect-integration-with-spring-security/

The only problem is that it completely replaces the Form Login with Facebook Connect.

I have the native form login in place,

I also have Facebook Connect in place, Upon gathering user information I link it to a native account but without a password.

At that point I would like to call a link or method to start process of going into the Spring Security Filter Chain.

---

Here is the source code that works, but am trying to modify. It contains all the files I'm taking about.

Now from what I understand I need to add a custom FacebookAuthenticationProvider so that my AuthenticationManager knows about it.

<bean id="facebookAuthenticationProvider" class="org.springframework.security.facebook.FacebookAuthenticationProvider">
</bean>

<security:authentication-manager alias="authenticationManager">
    <security:authentication-provider ref="facebookAuthenticationProvider" />
</security:authentication-manager>

Then within the FacebookAuthenticationProvider I would have to call an FacebookAuthenticationToken that would take my the current facebook Uid and SessionKey of the user.

Then try authenticate this Token.

So where does the FacebookAuthenticationFilter come into it?

I'm just trying to understand the order at which these 3 files are called. As if you were trying to implement any other custom authentication.

FacebookAuthenticationFilter.java   
FacebookAuthenticationProvider.java     
FacebookAuthenticationToken.java    

I have also posted this on the Spring Security Forum

Answer 1

I've written an article about multiple authentication providers with spring security (so e.g. one form login, one facebook login and one login with open-id). Hope that helps: http://thoean.com/programming/java/multiple-authentication-provider-with-spring-security/