search

SoapSeller / omniauth-facebook-access-token

51 stars 68 forks source link

Use appsecret_proof instead of checking app.id #14

Closed satococoa closed 7 years ago

satococoa commented 9 years ago

Add appsecret_proof parameter when we get /me. In this way, we don't have to access /app to validate that the token belongs to the application.

https://developers.facebook.com/docs/graph-api/securing-requests#appsecret_proof

Zverik commented 8 years ago

It fails with:

NoMethodError (undefined method `[]' for nil:NilClass):
  config/initializers/cors.rb:9:in `call'
SoapSeller commented 7 years ago

@satococoa I've finally got around to merge this, also, I've given you direct access to the repository. Do with it whatever you want (:

Thanks!

satococoa commented 7 years ago

@SoapSeller I see. Thanks! 👍