Login the user with Facebook without revealing the APP ID
In the Facebook documentation about Login the user with Facebook APP they say:
"Because it requires you to include your App Secret you should not attempt to make this call client-side as that would expose this secret to all your app users. It is important that your App Secret is never shared with anyone".
I understend it is about APP Secret, but what about the Developer ID?
The developer ID is added in the URL address of the window for login the user with Facebook:
I tryed also the get and display the page from that URL address using cURL, but of course not works.
Is there any way to login the users in my web site using Facebook, without revealing the developer ID?
Or, it doesn't matter if someone uses your Facebook APP ID?
The app ID can’t be used by anyone else because it is linked to a certain user account. At least that’s what I would think. Even though Facebook isn’t the vanguard of privacy measures it would be pretty stupid if one could just use another person’s app ID.
you could try using iframes? not a very good solution for the problem because it's still very much available but at least it's not in the address bar.
Thank you for the answer.
In the end I belive it doesn't matter because if FB made their APP to work in this way, they know how that ID can be used.
And I think it is the same ID that is already publicly.
|All times are GMT +1. The time now is 11:14 PM.|
Powered by vBulletin®
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.