0

I'm developing a WebApp with Codeigniter 3, Facebook SDK and this this library for manage the request.

Using the main tutorial for Facebook Login all things work fine. An example here:

<?php $login = $this->facebook->login_url(); ?>
<a href="<?=$login;?>"> Login with your Facebook account </a>

After that I can do any request with the access token.

With the new update, facebook apps must activate the Strict Mode for Redirect URIs. So in the developer portal I've activated my urls like this:

http://localhost/home/login

But when I try to log in, facebook response with

http://localhost/home/login?code=SOME_STRING_HERE&state=SOME_STRING_HERE#_=_

without any access token or valid session.

Am I skipping any steps?

With the same code, disabling Strict Mode for Redirect URIs all things work fine.

Thanks

Aso Strife
  • 1,089
  • 3
  • 12
  • 31
  • 1
    You have a code in the query string. You’re supposed to then exchange that for an access token. – Martin Bean Feb 08 '18 at 11:19
  • What do you mean? @MartinBean – Aso Strife Feb 08 '18 at 11:30
  • That is part of the normal login flow - you get a `code` back from the login dialog, and then your app has to exchange that code for an access token ... that has nothing in particular to do with Strict Mode, it has always worked this way. If this now fails when you enable strict mode - then you need to go and do some debugging, to figure out in which part of the process it fails now. – CBroe Feb 08 '18 at 11:44
  • Facebook SDK returned an error: Cross-site request forgery validation failed. Required param "state" missing from persistent data. It means there somethings different. Byt I don't know how change. – Aso Strife Feb 08 '18 at 12:29

2 Answers2

1

Here an article about what is changing in the authorization flow from March.

Here the details on the url syntax. Any dynamic parameter that you would like to receive as query parameters of the redirect uri should be pass in the state parameter when calling the authorization uri.

chess4ever
  • 134
  • 11
  • This has solved my problem, thanks. For anyone reading this who doesn't get it the first time(I didn't), just rename your query parameter to **state**, in my case, I renamed ?token=vdfg23452 to ?state=vdfg23452 – ToneCrate Nov 08 '18 at 23:22
1

After I enabled Strict Mode for Redirect URIs mode, when I try to login using facebook I started getting "Graph returned an error: Can't Load URL: The domain of this URL isn't included in the app's domains" error eventhough I specified redirect urls. After upgrading from graph sdk v4 to graph sdk v5 error is gone.

Nuryagdy Mustapayev
  • 667
  • 1
  • 7
  • 27