Solved

Facebook wants me to use OAuth 2.0. What do I do?

Posted on 2011-09-29
3
622 Views
Last Modified: 2012-05-12
We received the following message from Facebook on one of our Tab pages for a business. The page is just a simple graphic using an iframe canvas and is hosted on an https:// URL, so I really don't know what else I'm supposed to do.

Surely, I'm not the only one to encounter this problem! Can you tell me what action I need to take?

________

Reminder: Upgrade Your App to OAuth 2.0 and HTTPS by October 1st. In May
we announced that all apps on Facebook need to support OAuth 2.0 and HTTPS
to make the platform more secure.

All apps, including page tab apps, must migrate to OAuth 2.0 for
authentication. The old SDKs, including the old JavaScript SDK
(FeatureLoader.js) and old iOS SDK (facebook-iphone-sdk) will no longer
work. In addition, iframe Canvas and Page Tab apps must support HTTPS and
provide a secure canvas or secure page tab URL.
0
Comment
Question by:Tim-SocialLife
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Expert Comment

by:Mark Gilbert
ID: 37064995
Simple answer: Use OAuth. If you don't your app won't remain published. This stipulation has been in place for at least the last 8 months that I've been working on a project, and it's a strict stipulation. Reason being is that FB as a whole never used to be secure, however with all that personal data out there, concerns have been raised about the security and privacy of such data. This is why ALL applications, no matter how small or complicated MUST support secure and non secure traffic.

My recommendation to meet this requirement: go to godaddy and purchase a really cheap SSL certificate. I believe the cheapest is $69.99 per year, and then have this installed on your app site. Then go into the app settings (developers.facebook.com/apps) and then state the secure url, and under advanced check yes to all the oauth 2 related items. Then you are done.

Hope this helps.
0
 
LVL 18

Accepted Solution

by:
Mark Gilbert earned 500 total points
ID: 37065011
I forgot to mention, as you already state you have https you need to define that in the apps settings. So disregard the ssl purchasing and move on to the other recommendations.
0
 

Author Closing Comment

by:Tim-SocialLife
ID: 37067650
Unfortunately, I no longer have admin access to the page so I cannot verify whether or not this fixes the problem, but it logically makes sense that this would be the issue given that all of the other pages hosted on the server are fine. Thank you.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Developer portfolios can be a bit of an enigma—how do you present yourself to employers without burying them in lines of code?  A modern portfolio is more than just work samples, it’s also a statement of how you work.
Today it’s fairly well known that high-performing websites and applications bring in more visitors, higher SEO, and ultimately more sales. By the same token, downtime is disastrous for companies and can lead to major hits on a brand, reputation, an…
The viewer will get a basic understanding of what section 508 compliance can entail, learn about skip navigation links, alt text, transcripts, and font size controls.
The is a quite short video tutorial. In this video, I'm going to show you how to create self-host WordPress blog with free hosting service.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question