0

I have added a facebook login button.

After authenticating I get the following parameters passed via Javascript:

"status": "connected",
   "session": {
      "uid": "...",
      "session_key": "...",
      "secret": "...",
      "expires": 000,
      "base_domain": "...",
      "access_token": "...",
      "sig": "..."
   }

I plan to post these to a new page and authenticate to login the user, but unsure which ones I should use as I can't find any documentation for this.

How can I securely authenticate a user from this information?

1 Answer 1

0

Just the access_token. Facebook Graph API is simple enough. Just spend some time with it :)

7
  • Do you mean simply retrieving using graph.facebook.com/me with the access token?
    – Pool
    Jun 6, 2011 at 19:33
  • @Pool: yep: what exactly is you problem? Jun 6, 2011 at 19:35
  • This is what I'm currently doing but I believed I needed to use the app secret at some stage?
    – Pool
    Jun 6, 2011 at 19:38
  • no. grpah api has two flows. server side and client side. whats the point in passing app_secret in client side flow. everyone can see that anyway :) Jun 6, 2011 at 19:41
  • Indeed. Currently, I am posting the details to server and thought I would check the app secret there.
    – Pool
    Jun 6, 2011 at 19:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.