node.js - Ask user to complete registration after social login through Passport -

i wonder best practice ask user more information complete registration after social login passport. able sign in user through twitter, , callback route '/auth/twitter/callback' called. however, @ point i'm presenting form ask them few more pieces of information. problem @ point req.isauthenticated() returns true already, while i'd rather set isauthenticated manually after complete registration, not twitter callback called. suggestions?

there few ways can achieve want , point of view fiddling around req.isauthenticated() not best. recommend following approaches.

method 1

in addition req.isauthenticated() put new condition check whether user completed registration or not i.e. user.completedregistration() completedregistration() function checks either mongodb or other logic decide yes or not. sample follow:

var isauthenticated = function (req, res, next) {   if (req.isauthenticated() && user.completedregistration()) {     //user both authenticated registered.     return next();   } else if (req.isauthenticated() && !user.completedregistration()) {     //user authenticated, need fill form.     res.redirect('/to/the/view/that/have/registration/form');    } else {     // user needs login     res.redirect('/map/to/the/login/route/handler');   } } 

you use isauthenticated in routes, follow:

// secure route   router.get('/secure/api/create', isauthenticated, function(req, res) {     //return secure view   });  

user.completedregistration() function queries, mongodb logged in user using logged in user id (twitter id) , check if particular field set. set field when user register otherwise default can false.

method 2

depending on ordering of configs in app.js every request runs deserializeuser shown below:

passport.deserializeuser(function(id, done) {    user.findbyid(id, function(err, user) {       console.log('deserializing user:',user);          done(err, user);       });  }); 

which takes id of logged in user req object , retrieves user mongodb , populate more information user in req object. can tweak method user.find using not id of user but, field shows whether user registered or not. need set field in mongodb user object , user model.

method 3

leave alone passport related configs, write own checks in router level check whether logged in user registered or not. can using following steps:

1. user access route , make sure he/she authenticated
2. you retrieve id of logged in user
3. you check mongodb or mysql or redis or whatever other logic can implement decide whether user id has completed registration or not
4. if not redirect user registration page, if yes let user's request served normally.

to obtain id of logged in user, can check req.user field. shown in following function, have implemented twitter, facebook , local , hence checks.

function getcurrentloggedinuserid(req, callback) {   console.log('func getcurrentloggedinuserid');    var userid = "ghost";   if(req.user) {     if(req.user.local != undefined && req.user.local.email != undefined) {       userid = req.user.local.email;     } else if(req.user.fb != undefined && req.user.fb.id != undefined) {       userid = req.user.fb.id;     } else if(req.user.twitter != undefined && req.user.twitter.id != undefined) {       userid = req.user.twitter.id;     }     callback(null, userid);   } else {     callback(null, userid);   } } 

there many other ways achieve have asked in here but, need reading on express app combined passport work , understanding of intercept user requests , approach suits best.