AveryRegier / socialauth

Automatically exported from code.google.com/p/socialauth
0 stars 1 forks source link

Facebook able to communicate to the local network application #303

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. All steps required to make connection to social media facebook
2. Facebook redirects to local servlet. 
3.

What is the expected output? What do you see instead?
Facebook should not be able to access our website because we have not made it 
public. Instead the redirect uri is called correctly and able to proceed to 
next page. 
But if we try the api provided by facebook (com.facebook.api.*), this doesn't 
work. 

What version of the product are you using? On what operating system?
Using the latest version and on windows 8 OS

Please provide any additional information below.
Could it be because we put SocialAuthManager in session. Why the difference in 
behaviour

Original issue reported on code.google.com by sudham...@gmail.com on 7 Oct 2013 at 11:30

GoogleCodeExporter commented 9 years ago
Your mean is through SocialAuth library you are able to make your application 
work but using facebook API it is not working?

If not then please explain your question.

Original comment by tarun.na...@3pillarglobal.com on 8 Oct 2013 at 2:22

GoogleCodeExporter commented 9 years ago
Yes Tarun, that is what I mean. See ideally we are behind a firewall and 
external websites shouldn't be able to make a call back to our application. So 
with the facebook api, it works as expected, that is , its unable to call back, 
but with the socialauth library, facebook is able to call the redirect url. 

Original comment by sudham...@gmail.com on 9 Oct 2013 at 5:04

GoogleCodeExporter commented 9 years ago
I haven't tried Facebook API so cant say why it is not working. 

Facebook just redirect the user to the given redirect url after authentication, 
it is not making any call on your application. And since you are in your local 
environment and your system is behind the firewall, that's why your browser is 
making a call on redirect URL.

Original comment by tarun.na...@3pillarglobal.com on 9 Oct 2013 at 2:25

GoogleCodeExporter commented 9 years ago

Original comment by tarun.na...@3pillarglobal.com on 15 Oct 2013 at 12:12