pc035860 / angular-easyfb

Super easy AngularJS + Facebook JavaScript SDK.
MIT License
440 stars 69 forks source link

integration with passport? #22

Open dcsan opened 10 years ago

dcsan commented 10 years ago

easyfb is great, thanks!

feature request - have you considered integration with http://passportjs.org/ for handling User authentication?

otherwise how do you best recommend integrating an apps own User data based off the FB authentication that easyfb provides?

pc035860 commented 10 years ago

Hi @dcsan ,

I'm not familiar with node as well as passportjs, but I think passportjs already implemented an authentication flow with Facebook APIs.

The purpose of angular-easyfb module is to make it easier working with Facebook JavaScript SDK in AngularsJS, and handling user authentication is in a different level.

I'm using angular-easyfb to provide better flow and experience for users who try to "Login with Facebook". e.g. retrieves login status in cookie, makes sure user is connected with our app before sending authentication message to backend and retrieves access_token for backend etc.

dcsan commented 10 years ago

@pc035860 thanks for the response! passport does indeed have a FB auth flow but its not as user friendly as the completely client side JS SDK. I prefer using your ezfb approach.

passport does handle protection of certain routes from access unless the user is logged in, sessions etc. how are you handling this auth on your main app? server side, or by doing some type of simple checks client side $scope.loginStatus for a valid FB token from the JS SDK?

pc035860 commented 10 years ago

Since our product is a single page app, almost all our API calls require authentication, which is backed by server side sessions.

And there's also an API to check if the user is logged in or not.

gad2103 commented 10 years ago

hi. thanks for the plugin. i'm trying to get it working with passport.js also but i'm a little confused how to do that. i have a login process that uses passport and express and sets auth via server backed session. i want to then be able to use the ezfb api with the authenticated front end.

i tried calling ezfb.getLoginStatus to check to make sure that user is logged in but it returned nothing...

i would appreciate any help integrating these two. thanks!