Facebook recently announced that on October 1st, 2011, all Facebook third-party apps will need to transition to OAuth2. The JavaScript and PHP SDK code is posted, but how would you make the change if you're using Python/Django? To help others make the transition, we've released our own set of Python code at this GitHub repo:
https://github.com/rogerhu/facebook_oauth2
One of the pain points is that users may have existing OAuth cookies set on their browser, which you may use in your current application to authenticate. However, because Facebook Connect's JavaScript library requires an apiKey change parameter, it makes it hard to use their existing library to force these fbs_ cookie deletions. Furthermore, you'd have to write your own JS since the Facebook JS SDK is hard-coded to use only the new apiKey parameter.
We also show in this code how you can force these fbs_ cookie deletions on the server-side, primarily by setting the expiration date and providing the correct domain= parameter back to the client. It's worked well for us in managing the transition to OAuth2, so we hope you will find the same approach useful.
Good luck!
No comments:
Post a Comment