Facebook wants me to use OAuth 2.0. What do I do?

We received the following message from Facebook on one of our Tab pages for a business. The page is just a simple graphic using an iframe canvas and is hosted on an https:// URL, so I really don't know what else I'm supposed to do.

Surely, I'm not the only one to encounter this problem! Can you tell me what action I need to take?

________

Reminder: Upgrade Your App to OAuth 2.0 and HTTPS by October 1st. In May
we announced that all apps on Facebook need to support OAuth 2.0 and HTTPS
to make the platform more secure.

All apps, including page tab apps, must migrate to OAuth 2.0 for
authentication. The old SDKs, including the old JavaScript SDK
(FeatureLoader.js) and old iOS SDK (facebook-iphone-sdk) will no longer
work. In addition, iframe Canvas and Page Tab apps must support HTTPS and
provide a secure canvas or secure page tab URL.
Tim-SocialLifeAsked:
Who is Participating?
 
Mark GilbertConnect With a Mentor Senior Performance EngineerCommented:
I forgot to mention, as you already state you have https you need to define that in the apps settings. So disregard the ssl purchasing and move on to the other recommendations.
0
 
Mark GilbertSenior Performance EngineerCommented:
Simple answer: Use OAuth. If you don't your app won't remain published. This stipulation has been in place for at least the last 8 months that I've been working on a project, and it's a strict stipulation. Reason being is that FB as a whole never used to be secure, however with all that personal data out there, concerns have been raised about the security and privacy of such data. This is why ALL applications, no matter how small or complicated MUST support secure and non secure traffic.

My recommendation to meet this requirement: go to godaddy and purchase a really cheap SSL certificate. I believe the cheapest is $69.99 per year, and then have this installed on your app site. Then go into the app settings (developers.facebook.com/apps) and then state the secure url, and under advanced check yes to all the oauth 2 related items. Then you are done.

Hope this helps.
0
 
Tim-SocialLifeAuthor Commented:
Unfortunately, I no longer have admin access to the page so I cannot verify whether or not this fixes the problem, but it logically makes sense that this would be the issue given that all of the other pages hosted on the server are fine. Thank you.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.