We have a load balancer server that has httpS enabled and multiple other servers behind it who are actual websites. Traffic between internal servers is http.
The problem is, getRedirectLoginHelper that calls urlDetectionHandler detects that server is running http. That's true, but then redirect_uri it generates, comes out as http and we get _OAuth "Facebook Platform" "redirect_urimismatch" error even when we pass correct redirect_uri with httpS in it.
There should be option to strictly force https for getRedirectLoginHelper function.
Try to use $config['url_detection_handler'] in construct of Facebook class
with your implements of UrlDetectionInterface or extends of FacebookUrlDetectionHandler
We have a load balancer server that has httpS enabled and multiple other servers behind it who are actual websites. Traffic between internal servers is http.
The problem is,
getRedirectLoginHelper
that callsurlDetectionHandler
detects that server is running http. That's true, but then redirect_uri it generates, comes out as http and we get _OAuth "Facebook Platform" "redirect_urimismatch" error even when we pass correctredirect_uri
with httpS in it.There should be option to strictly force https for
getRedirectLoginHelper
function.