The tag allows you to easily integrate third-party Oauth 2 authentication provider in your application. This tag currently supports Facebook and Google authentication. Also, this tag supports Oauth providers that support the Oauth 2 protocols. For instance, Microsoft and Github.
If type is not Facebook or Google then use access token endpoint and other attributes.
This tag requires
Adobe ColdFusion 11 and up.
Not supported on Lucee, OpenBD, etc.
Currently supported values are Facebook and Google. Implicitly supports the authentication workflow of Facebook and Google.
Unique ID generated while registering your application with the Oauth provider.
Scopes are the permissions that a developer seeks from the users. These are usually comma separated values of permissions.
Refer to the Oauth provider's documentations for more information.
For example, after Facebook authentication, if a developer wants to access an email address and then the friend lists of a user, the developer will use:
Note: The scope name varies for different Oauth providers.
The state variable is used to pass back any information to your web application after the authentication and redirection are completed. Any value passed to this attribute is returned to the web application after authentication. This is useful for CSRF (Cross-site request forgery) protection. You can use ColdFusion’s security-related CSRF functions for this attribute.
If type is not specified, this will be used as endpoint URL to be invoked for user authentication.
If type is not specified this will be used as end point URL to be invoked for app authentication.
Parameter is the App Secret as displayed in your social media app's settings.
A struct which will have login info of the user including login success/failure, failure reason, user name, user id.