Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate with Facebook Limited Login wrapped OIDC token #112

Open
ricsantos opened this issue Jul 10, 2024 · 0 comments
Open

Integrate with Facebook Limited Login wrapped OIDC token #112

ricsantos opened this issue Jul 10, 2024 · 0 comments

Comments

@ricsantos
Copy link

Trying to update to Facebook Limited Login with an iOS client, which now returns a JWT authentication token that conforms to Open ID Connect.

https://developers.facebook.com/docs/facebook-login/limited-login/

https://developers.facebook.com/docs/facebook-login/limited-login/token/#jwks

My server was previously using a passport-facebook-token strategy to authenticate mobile app users, using the access_token return by the Facebook Login SDK.

Now that things have changed due to privacy and FBSDK 17, this access token is invalid if the user denies App Tracking.

The alternative is to use a newer Facebook Login API that returns:

Limited Login returns an AuthenticationToken that wraps an OpenID Connect token.

Was thinking, could this OpenID Connect token be passed to passport-openidconnect to continue the authentication?

Seems it needs a tokenURL but I have the token.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant