TL;DR version: Here is an app to allow logging in via twitter, facebook, openid, yahoo, google, which should work transparently with Django authentication system. (@login_required, User and other infrastructure work as expected.) Demo and Code.Longer version follow:

We are releasing our new app. Django-Socialauth. This app makes it awfully easy, to allow users to login your site using Yahoo/Google/Twitter/Facebook/Openid. A demo is available here.

This is released under an Attribution Assurance License. A copy of the same is provided included with the code.

After installing this app, you can use @login_required on any view and users identified via any means can access protected content.

We provide services to integrate and implement this, for a low price of USD 1600. Please contact us at licenses@uswaretech.com to discuss your exact needs.

The README is copied here for convenience.

What it does.

Allow logging in via various providers.

Logging In

This is a application to enable authentication via various third party sites. In particular it allows logging in via

1. Twitter
2. Gmail
3. Facebook
4. Yahoo(Essentially openid)
5. OpenId

Libs you need to install

1. python-openid (easy_install)
2. python-yadis (easy_install)
3. python-oauth(easy_install)

The API Keys are available from

• http://www.facebook.com/developers/createapp.php
• https://developer.yahoo.com/dashboard/createKey.html
• https://www.google.com/accounts/ManageDomains
• http://twitter.com/oauth_clients

How it works.

Openid: Users need to provide their openid providers. Talk to the providers and login.
Yahoo: Yahoo is an openid provider. Talk to Yahoo endpoints. (Endpoint: http://yahoo.com)
Google: Google is a provider. Talk to them. (Endpoint: https://www.google.com/accounts/o8/id)
Facebook: Facebook connect provides authentication framework.
Twitter: We use Twitter Oauth for authentication. In theory, Oauth shouldn’t be used for authentication. (It is an autorisation framework, not an authentication one), In practice it works pretty well. Once you have an access_token, and a name, essentially authenticated.

References

1. Demo of app
2. Code for app
3. http://openid.net/developers/
4. http://developer.yahoo.com/openid/
5. http://code.google.com/apis/accounts/docs/OpenID.html
6. http://apiwiki.twitter.com/OAuth-FAQ
7. http://developers.facebook.com/connect.php

Below the hoods

1. For all providers(except Facebook) there are two urls and views. (start and done)
2. Start sets up the required tokens, and redirects and hands off to the correct provider.
3. Provider handles authentication on their ends, and hands off to Us, providing authorization tokens.
4. In done, we check if the user with these details already exists, if yes, we log them in. Otherwise we create a new user, and log them in.

For all of these, we use standard django authenication system, with custom auth_backends, hence all existing views, and decorators as login_required will work as expected.

Urls

/login/ Login page. Has all the login options  
/openid_login/ AND /openid_login/done/  
/yahoo_login/ AND /yahoo_login/done/  
/gmail_login/ AND /gmail_login/done/  
/twitter_login/ AND /twitter_login/done/  
/facebook_login/done/ We dont have a start url here, as the starting tokens are  
set in a popup, as per FB Connect recommendations.

Implementation

1. Install required libraries.
2. Get tokens and populate in localsettings.py
3. Set the token callback urls correctly at Twitter and Facebook.
4. Add the OpenId middleware. Set the Authentication backends. (Set in localsettings.example.py)

Related posts:

1. Develop Twitter API application in django and deploy on Google App Engine
2. How to build a Facebook app in Django
3. Parable of the single sheep – Or How Google is destroying the internet, and nobody seems to know.

Facebook has a simple and robust API which allows users to build applications for the Facebook platform. We being the intelligent developers will use the superb Django framework to build our application.

The completed code for this is available at https://svn.uswaretech.com/favlang/. The completed application is deployed to facebook here.

How does a Facebook application work?

1. The users make a request to apps.facebook.com/yourapp/page1/
2. The Facebook servers make a request to yourserver.com/page1/
3. You get the requests and can make calls to Facebook API, and use FQL to query the Facebook tables.
4. You send back a page written in FBML to FB servers.
5. FB servers render your FBML to HTML.
6. FB servers send a HTML request to the user.

What tools does FB provide you?

1. FQL: Facebook Query Language. This is a language similar to SQL. Sample this

SELECT name, pic FROM user WHERE uid=211031 OR uid=4801660

1. Facebook API: This is a set of RESTful urls which can be used to get data from Facebook and to do actions on the behalf of the logged in users.

2. FBML: Facebook Markup Language. This is a set of tags, similar to Html tags, which allow you to get your page rendered with extra information on the facebook servers.

<fb:name uid="211031">

would show the name of the user with the id.

What else do you need?

1. A server, which can run Django. Duh.
2. We are using Python, so we can use FB rest API directly. But somebody has already done the hard work and written the awesome Pyfacebook library, which makes talking to Facebook a breeze.

What will we build?

We will build a application which allows you to store your favorite programming language at Facebook. This has a single page with single input box where you can store your favorite programming language.

The completed code for this is available at https://svn.uswaretech.com/favlang/. The completed application is deployed to facebook here.

Getting Started

1. Go to http://www.facebook.com/developers/
2. Create a new app, give it a name.
3. Get your application api key, and application secret.
4. Map callback url to the base of your Server.
5. Download the Pyfacebook library, and put it where Python can find it. The following import statements should work. import facebook and import facebook.djangofb

Setting up your App

1. Edit settings.py and add the following settings.

   FACEBOOK_API_KEY = '1673458a9d3ddaa8c6f888d7150da256'
FACEBOOK_SECRET_KEY = '666197caab406752474bd0c6695a53f6'

2. Add facebook.djangofb.FacebookMiddleware to MIDDLEWARE_CLASSES

3. Create an app named Favlang to hold our Code.

Our App

Its a simple Django app with Models, views and Urls. The only difference with a normal Django app is that, a. The templates are in FBML. b. We will use FQL and FBAPI to talk to FB.

Urls.py

from django.conf.urls.defaults import *

urlpatterns = patterns('favlang.views',
    (r'^$', 'canvas'),
)

A basic Urlpatter, mapping patterns to views, nothing FB specific to see here.

Models.py

from django.db import models

class FacebookUser(models.Model):
    """A simple User model for Facebook users."""

    # We use the user's UID as the primary key in our database.
    id = models.IntegerField(primary_key=True)
    language = models.CharField(max_length=64, default='Python')

A normal models.py. Nothing FB specific to see here. (Instead of an autoincrementing PK, we have a PK which we will set manually to FB uid.)

Views.py

from django.http import HttpResponse
from django.views.generic.simple import direct_to_template

import facebook.djangofb as facebook

from favlang.models import FacebookUser

@facebook.require_login()
def canvas(request):
    # Get the User object for the currently logged in user
    user, created = FacebookUser.objects.get_or_create(id = request.facebook.uid)

    # Check if we were POSTed the user's new language of choice
    if 'language' in request.POST:
        user.language = request.POST['language'][:64]
        user.save()

    # User is guaranteed to be logged in, so pass canvas.fbml
    # an extra 'fbuser' parameter that is the User object for
    # the currently logged in user.
    return direct_to_template(request, 'favlang/canvas.fbml', extra_context={'fbuser': user})

Ok. SO finally something FB specific. Lets see what is happening behind the scenes.

1. We are putting our view behind a @facebook.require_login() decorator. This is similar to the login_required decorator. It makes sure that a valid FB user is logged in before it allows access to our view.

2. The Middleware facebook.djangofb.FacebookMiddleware attaches a facebook object to the request, which provides access to the logged in user and some other relevant data.

3. We created a FacebookUser for the currently logged in user, in our database, with this line.

user, created = FacebookUser.objects.get_or_create(id = request.facebook.uid)

1. We returned the FBML with our data. The FBML is parsed by the Facebook servers and HTML returned to the user.

The template

<fb:header>
  {% comment %}
    We can use {{ fbuser }} to get at the current user.
    {{ fbuser.id }} will be the user's UID, and {{ fbuser.language }}
    is his/her favorite language (Python  .
  {% endcomment %}
  Welcome, <fb:name uid="{{ fbuser.id }}" firstnameonly="true" useyou="false">!
</fb:name>

<div class="clearfix" style="border: 1px solid rgb(216, 223, 234); padding: 10px; float: left; margin-left: 30px; margin-bottom: 30px; width: 500px;">
  Your favorite language is {{ fbuser.language }}.
  <br><br>

  <div class="grayheader clearfix">
    <br><br>

    <form action="." method="post">
      <input name="language" value="{{ fbuser.language }}" type="text">
      <input value="Change" type="submit">
    </form>
  </div>
</div>

This template is written in FBML. FBML is a superset of HTML. The tags which start with <fb: are=”" facebook=”" specific=”" tags.=”" for=”" example=”" the=”" tag=”" fb:name=”" =""><fb:name uid="{{ fbuser.id }}" firstnameonly="true" useyou="false"> renders the name of the user whose uid is passed in uid.

There is also a form which allows user to change their Favorite language. In views.py this is handled as

if 'language' in request.POST:
    user.language = request.POST['language'][:64]
    user.save()

Resources.

1. Facebook developers.
2. Facebook developers wiki.
3. Facebook developers forum.
4. [Pyfacebook]
5. FBAPI Documentation
6. FQL Documentation

7. FBML Documentation

8. Code listing

9. Live Application

Related posts:

1. Django-SocialAuth – Login via twitter, facebook, openid, yahoo, google using a single app.
2. Develop Twitter API application in django and deploy on Google App Engine
3. Tools of Pro Django developer – aka What powers dinette and almost every app we write.