Link to home
Start Free TrialLog in
Avatar of Tim-SocialLife
Tim-SocialLife

asked on

Facebook wants me to use OAuth 2.0. What do I do?

We received the following message from Facebook on one of our Tab pages for a business. The page is just a simple graphic using an iframe canvas and is hosted on an https:// URL, so I really don't know what else I'm supposed to do.

Surely, I'm not the only one to encounter this problem! Can you tell me what action I need to take?

________

Reminder: Upgrade Your App to OAuth 2.0 and HTTPS by October 1st. In May
we announced that all apps on Facebook need to support OAuth 2.0 and HTTPS
to make the platform more secure.

All apps, including page tab apps, must migrate to OAuth 2.0 for
authentication. The old SDKs, including the old JavaScript SDK
(FeatureLoader.js) and old iOS SDK (facebook-iphone-sdk) will no longer
work. In addition, iframe Canvas and Page Tab apps must support HTTPS and
provide a secure canvas or secure page tab URL.
Avatar of Mark Gilbert
Mark Gilbert
Flag of United States of America image

Simple answer: Use OAuth. If you don't your app won't remain published. This stipulation has been in place for at least the last 8 months that I've been working on a project, and it's a strict stipulation. Reason being is that FB as a whole never used to be secure, however with all that personal data out there, concerns have been raised about the security and privacy of such data. This is why ALL applications, no matter how small or complicated MUST support secure and non secure traffic.

My recommendation to meet this requirement: go to godaddy and purchase a really cheap SSL certificate. I believe the cheapest is $69.99 per year, and then have this installed on your app site. Then go into the app settings (developers.facebook.com/apps) and then state the secure url, and under advanced check yes to all the oauth 2 related items. Then you are done.

Hope this helps.
ASKER CERTIFIED SOLUTION
Avatar of Mark Gilbert
Mark Gilbert
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Tim-SocialLife
Tim-SocialLife

ASKER

Unfortunately, I no longer have admin access to the page so I cannot verify whether or not this fixes the problem, but it logically makes sense that this would be the issue given that all of the other pages hosted on the server are fine. Thank you.