http://groups.google.com/group/facebooker/browse_thread/thread/ac8df9ff7fd12edc#

I'm getting an IncorrectSignature error when a user is both not logged in to facebook and has not authorized my application before. Any other combination of logged in or previously authorized works fine.

This is facebooker 1.0.29 as you can see in the stack trace, but I tried 1.0.31,
1.0.26 (because of http://github.com/mmangino/facebooker/issues#issue/3
) and 1.0.37 from github. All give the same error.

Here's the stack trace:

Facebooker::Session::IncorrectSignature (Facebooker::Session::IncorrectSignature):
    /usr/lib64/ruby/gems/1.8/gems/facebooker-1.0.29/lib/facebooker/rails/controller.rb:205:in `verify_signature'
    /usr/lib64/ruby/gems/1.8/gems/facebooker-1.0.29/lib/facebooker/rails/controller.rb:190:in `verified_facebook_params'
    /usr/lib64/ruby/gems/1.8/gems/facebooker-1.0.29/lib/facebooker/rails/controller.rb:45:in `facebook_params'
    /usr/lib64/ruby/gems/1.8/gems/facebooker-1.0.29/lib/facebooker/rails/controller.rb:256:in `application_is_installed?'
    /usr/lib64/ruby/gems/1.8/gems/facebooker-1.0.29/lib/facebooker/rails/controller.rb:286:in `ensure_application_is_installed_by_facebook_user'
    /usr/lib64/ruby/gems/1.8/gems/activesupport-2.2.2/lib/active_support/callbacks.rb:178:in `send'
    /usr/lib64/ruby/gems/1.8/gems/activesupport-2.2.2/lib/active_support/callbacks.rb:178:in `evaluate_method'
    /usr/lib64/ruby/gems/1.8/gems/activesupport-2.2.2/lib/active_support/callbacks.rb:166:in `call'
    /usr/lib64/ruby/gems/1.8/gems/actionpack-2.2.2/lib/action_controller/filters.rb:225:in `call'
    /usr/lib64/ruby/gems/1.8/gems/actionpack-2.2.2/lib/action_controller/filters.rb:629:in `run_before_filters'
    /usr/lib64/ruby/gems/1.8/gems/actionpack-2.2.2/lib/action_controller/filters.rb:615:in `call_filters'
    /usr/lib64/ruby/gems/1.8/gems/actionpack-2.2.2/lib/action_controller/filters.rb:638:in `run_before_filters'
    /app/controllers/application.rb:26:in `call'
    /app/controllers/application.rb:26

Here's my config/facebooker.yml

production:
  api_key: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  secret_key: 88888888888888888888888888888888
  canvas_page_name: mysite
  callback_url: http://mysite.com/
  set_asset_host_to_callback_url: false

Here's the Facebook configuration:

Canvas Page URL: http://apps.facebook.com/mysite/
Canvas Callback URL: http://mysite.com/facebook/
Render method: FBML

Here is the route:

map.facebook '/facebook', :controller => 'facebook', :action => 'show'

Here is the controller:

require 'uri'

class FacebookController < ApplicationController

  helper_method :facebook_session

  ensure_application_is_installed_by_facebook_user

  def show
    rails_root = 'http://mysite.com/'
    rails_path = "#{rails_root}profiles/pic?"

    picurl = URI.escape(facebook_session.user.pic_big,
                        Regexp.new("[^#{URI::PATTERN::UNRESERVED}]"))

    url = "#{rails_path}fb_photo=#{picurl}&fb_uid=#{facebook_session.user.id}"

    render :text => "<fb:redirect url=\"#{url}\" />"
  end

end

Here are the specifics of the request and the entries in my log:

1) clicked link to http://apps.facebook.com/mysite/

Processing FacebookController#show (for 69.63.180.250 at 2009-06-05 17:33:49) [GET] 
  Parameters: {"fb_sig_time"=>"1244248429.6207", "fb_sig_in_new_facebook"=>"1", "fb_sig_app_id"=>"33333333333", "fb_sig"=>"44444444444444444444444444444444", "action"=>"show", "fb_sig_locale"=>"en_US", "_method"=>"GET", "fb_sig_in_canvas"=>"1", "fb_sig_position_fix"=>"1", "controller"=>"facebook", "fb_sig_request_method"=>"GET", "fb_sig_logged_out_facebook"=>"1", "fb_sig_added"=>"0", "fb_sig_api_key"=>"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"} 
Filter chain halted as [:ensure_application_is_installed_by_facebook_user] rendered_or_redirected. 
Completed in 4ms (View: 0, DB: 0) | 200 OK [http://mysite.com/facebook/] 

2) logged in to Facebook

3) authorized application on Facebook

Processing FacebookController#show (for 66.11.22.11 at 2009-06-05 17:34:25) [GET] 
  Parameters: {"action"=>"show", "installed"=>"1", "controller"=>"facebook", "auth_token"=>"77777777777777777777777777777777"}
  
Facebooker::Session::IncorrectSignature (Facebooker::Session::IncorrectSignature):

For some reason this two gems does not work together.

I believe that the extended permissions url: Session#permission_url yields wrong URL according to:
http://wiki.developers.facebook.com/index.php/Authorization_and_Authentication_for_Desktop_Applications#Prompting_for_Permissions
http://wiki.developers.facebook.com/index.php/Authorization_and_Authentication_for_Facebook_for_Mobile_Applications

I've created a patch: http://github.com/pk/facebooker/commit/f2c295aba3b02641572c0db360178d017911cec8

Pull request sent.

I've tried to get some photos from Facebook today. All my attempts failed with error that the signature is incorrect. I've fixed the issue by patching get_photos in a way how other *_url methods works.

Please checkout this commit: http://github.com/pk/facebooker/commit/4315b431f40a0b8343b3955538b527b46de93501

It doesn't do anything more than just create hash from params and filter that hash by values which are nil.

Now I'm able to get photos from FB using AID, PID or Subject_id.

To get the desired experience when using login and FB connect we must allow to pass fbconnect parameter in URL, see:
http://wiki.developers.facebook.com/index.php/Authorization_and_Authentication_for_Desktop_Applications
http://wiki.developers.facebook.com/index.php/Connect/Authorization_Websites

There is also ext_perm parameter which allows you to ask for Extended permissions in one go.

Please checkout the following patch: http://github.com/pk/facebooker/commit/0e5f411976d9822fa47f803847db7ec0709c2adb

I wonder how up to date is the Facebooker? There seems to be many inconsistencies in the code and the FB Wiki.

This started happening - maybe FB changed the way it's passing expires? Or Ruby 1.9 is different?

Line 198 facebooker/lib/facebooker/session.rb tries to do Integer(expires) but if expires is nil this explodes on 1.9. The fix I added was just to check for expires being nil:

def secure_with!(session_key, uid = nil, expires = nil, secret_from_session = nil)
  @session_key = session_key
  @uid = uid ? Integer(uid) : post('facebook.users.getLoggedInUser', :session_key => session_key)
  @expires = expires ? Integer(expires) : nil
  @secret_from_session = secret_from_session
end

Not sure if this is the best fix, but seems to work

The full stack trace can be found here: http://pastie.org/624106

Any attempt to run tests results in this error:
/Users/saadiq/dev/hotpotato-web-prototype/vendor/plugins/facebooker/lib/facebooker/adapters/adapter_base.rb:43:in `load_adapter': Facebooker::AdapterBase::UnableToLoadAdapter (Facebooker::AdapterBase::UnableToLoadAdapter)

Steps to reproduce:
1. logout facebook
2. visit http://apps.facebook.com/my_app_that_should_be_in_canvas, then you will be redirected to facebook's login page
3. Input you username/password
4. After successful login, you will find facebook redirect you to the app's server address instead of http://apps.facebook.com/my_app_that_should_be_in_canvas

Here is the way I fix this issue: in lib/facebooker/rails/controller.rb

  def create_new_facebook_session_and_redirect!
    session[:facebook_session] = new_facebook_session
    next_url = after_facebook_login_url || default_after_facebook_login_url
    in_canvas = facebook_params['in_canvas']
    top_redirect_to session[:facebook_session].login_url({:next => next_url,:canvas=>in_canvas}) unless @installation_required
    false
  end

It seems both text and created are not allow to be used in the model. I altered the following file:

lib/facebooker/models/tag.rb

before:

attr_accessor :pid, :subject, :xcoord, :ycoord

after:

attr_accessor :pid, :subject, :xcoord, :ycoord, :text, :created

But I was wondering why this was omitted in the first place. Is there a reason?

Thanks,

Chris

It's easy to make an error when configuring facebook. A typo in the facebooker.yml, in the name of the file, or by misplacing it. If you do, you might get very obscure errors

NoMethodError in User sessionsController#new

You have a nil object when you didn't expect it!
You might have expected an instance of Array.
The error occurred while evaluating nil.+

Turns out Facebooker.api_key might return nil.
lib/facebooker/rails/controller.rb:125 doesn't check that and add "_" to it.

I suggest raising if there is no api_key, say like:

index 1bf2d14..032e781 100644
--- a/lib/facebooker/adapters/facebook_adapter.rb
+++ b/lib/facebooker/adapters/facebook_adapter.rb
@@ -24,7 +24,7 @@ module Facebooker
     end
     
     def api_key
-      ENV['FACEBOOK_API_KEY'] || super      
+      ENV['FACEBOOK_API_KEY'] || super || raise("Can not find the api_key for facebooker. Please check the settings in config/facebooker.ym
     end
     
     def secret_key

Here is a patch for an issue that was documented by "TheFamilyGuy" at this link => http://tinyurl.com/yfql4yw

I am creating a Desktop app with Facebooker and the addition of hash[:session_key] = @session_key fixes the error mentioned in the previous link.

Link to patch => http://gist.github.com/218926

diff --git a/lib/facebooker/session.rb b/lib/facebooker/session.rb
index df052a2..9c29a86 100644
--- a/lib/facebooker/session.rb
+++ b/lib/facebooker/session.rb
@@ -239,9 +239,12 @@ module Facebooker
     def fql_query(query, format = 'XML')
       post('facebook.fql.query', :query => query, :format => format) do |response|
         type = response.shift
-        return [] if type.nil?
-        response.shift.map do |hash|
-          fql_build_object(type, hash)
+        if type.nil?
+          []
+        else
+          response.shift.map do |hash|
+            fql_build_object(type, hash)
+          end
         end
       end
     end

This fixes the issue (in lib/tasks/tunnel.rake line 22):
if ssh #{@public_host} -l #{@public_host_username} -p #{@ssh_port} netstat -an | egrep "tcp.*:#{@public_port}.*LISTEN" | wc.to_i > 0

secure_with_cookies! calls verify_signature which skips the verification if Rails > 2.3 and Rack::Facebook is used as a middleware. The problem is that the Rack middleware only verifies params and not cookies. The verification for the cookie should also happen inside Rack::Facebook.

I think the best approach is for most of the code in lib/facebooker/rails/controller.rb to go into a module that is included by Rack::Facebook and Rail's Controllers. facebook_session should also be set inside Rack's env['facebook_session'] by Rack::Facebook so that the facebook session can be shared across all Rack applications (including middlewares and rails).

Is facebooker rails 3 compatible?

If not, how much effort will it take to make it compatible?

Thanks.