New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't replicate Facebook demo. FB requiring HTTPS #510

Closed
dcldmartin opened this Issue Mar 21, 2018 · 10 comments

Comments

Projects
None yet
10 participants
@dcldmartin

dcldmartin commented Mar 21, 2018

I strongly suspect the reason I'm getting a bad request error from the Facebook API when trying to replicate results from the Facebook demo for requesting a token via OAuth2.0 is that they have changed their policy about allowing redirects not over HTTPS. So additional configuration may be required for this to work properly.

Per Facebook's docs, the toggle for 'Enforce HTTPS' that could previously be turned off for apps has been disabled, so OAuth redirects must apparently come with a TLS certificate.

When executing the demo code, an error appears during authentication with Facebook in the browser: "Insecure Login Blocked: You can't get an access token or log in to this app from an insecure page. Try re-loading the page as https://" and R shows a Bad Request error.

@braunm

This comment was marked as outdated.

braunm commented Mar 22, 2018

I have come across the same problem, but it is not clear what the recommended solution is. Is installing a certificate on my computer sufficient, or is there some additional httr configuration that would be necessary?

@kelceywilson

This comment was marked as off-topic.

kelceywilson commented Apr 3, 2018

Same problem here. Not sure why this and daroczig/fbRads#85 was closed with no solution...

@Gaut9a8m

This comment was marked as outdated.

Gaut9a8m commented Apr 15, 2018

Insecure Login Blocked: You can't get an access token or log in to this app from an insecure page.

please help with this problem

@andrex8

This comment was marked as outdated.

andrex8 commented Apr 17, 2018

same problem here, using Ionic 3
insecure login blocked

@diegorochawebdg

This comment was marked as outdated.

diegorochawebdg commented Apr 19, 2018

same problem, using Ionic 3
any suggestions?

@ryancha1205

This comment was marked as outdated.

ryancha1205 commented Apr 19, 2018

Is anyone can help us?

@schwarzcrepsley

This comment was marked as outdated.

schwarzcrepsley commented May 30, 2018

same here even when using https on dev environment without a valid cert.
unclear whether self-signed certs are acceptable, or do i have to pay some CA for one

@sachinbonzer

This comment was marked as outdated.

sachinbonzer commented Nov 15, 2018

The method FB.login will soon stop working when called from http pages. Please update your site to use https for Facebook Login.

please help with this problem

@hadley

This comment has been minimized.

@hadley

This comment has been minimized.

Member

hadley commented Nov 23, 2018

There's no practical way to serve https from localhost, so I think the best resolution will be to switch to an alternative auth flow, like the device flow. I'll work on updating the demo.

@hadley hadley closed this in c7167ec Dec 4, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment