Trusted credentials with Facebook Javascript SDK

Asked

Viewed 24 times

0

I have a web system in which captures the id of the Facebook user and stores it in the database for later use, currently I make the call via the SDK and the command by hidden field (low security method).

I wonder if I can enter this information (id) in any more secure way?

1 answer

1


The recommended way is to follow the authentication flow defined by Facebook, so they guarantee the "safe way". But I imagine you’re authenticating with the Facebook api on the front, taking user data(id) and sending it to the server.

Another way to do this would be to submit a request (Https mandatory) passing the accessToken you got on the front, and the backend revalidates this token and grabs the user data through the api again.

Browser other questions tagged

You are not signed in. Login or sign up in order to post.