doulang5323 2012-06-25 07:39
浏览 129
已采纳

在iFrame中显示Facebook登录对话框

I got a HTML page where it contain an iFrame, within the iFrame I have codes something like from the facebook example here : http://developers.facebook.com/docs/authentication/server-side/

<?php 

   $app_id = "YOUR_APP_ID";
   $app_secret = "YOUR_APP_SECRET";
   $my_url = "YOUR_URL";

   session_start();
   $code = $_REQUEST["code"];

   if(empty($code)) {
     $_SESSION['state'] = md5(uniqid(rand(), TRUE)); //CSRF protection
     $dialog_url = "http://www.facebook.com/dialog/oauth?client_id=" 
       . $app_id . "&redirect_uri=" . urlencode($my_url) . "&display=popup&state="
       . $_SESSION['state'];

     echo("<script> top.location.href='" . $dialog_url . "'</script>");
   }

   if($_SESSION['state'] && ($_SESSION['state'] === $_REQUEST['state'])) {
     $token_url = "https://graph.facebook.com/oauth/access_token?"
       . "client_id=" . $app_id . "&redirect_uri=" . urlencode($my_url)
       . "&client_secret=" . $app_secret . "&code=" . $code;

     $response = file_get_contents($token_url);
     $params = null;
     parse_str($response, $params);

     $graph_url = "https://graph.facebook.com/me?access_token=" 
       . $params['access_token'];

     $user = json_decode(file_get_contents($graph_url));
     echo("Hello " . $user->name);
   }
   else {
     echo("The state does not match. You may be a victim of CSRF.");
   }

 ?>

I am not sure if it is possible (Facebook probably prevent it?) or if I am not doing it correctly. When I am trying to change:

echo("<script> top.location.href='" . $dialog_url . "'</script>");

To

echo("<script> parent.changeIframeSrc('myIframe', '" . $dialog_url . "'); </script>");

Where my parent page (The one that shows the IFrame) will have a javascript function like below:

function changeIframeSrc(iframeName, url) {
    var $iframe = $('#' + iframeName);
    if ( $iframe.length ) {
        $iframe.attr('src',url);
    }
}

It works fine if I already login to Facebook, the problem is when it tries to redirect to Facebook login page, my Iframe just show a blank page. From Firebug I can see that it does submit a request to https://www.facebook.com/login.php?api_key=XXXXXXXX&skip_api_login=1&display=popup&cancel_url=XXXXXX&fbconnect=1&next=XXXXX&rcount=1 with http 200 in response, but my iframe is just blank.

My question is, is it because showing login page in iFrame is not allowed? or I am doing something wrong here?

Thanks!

  • 写回答

1条回答 默认 最新

  • duangengruan2144 2012-06-25 08:05
    关注

    Facebook does not allow for a standard iFrame call - iFrames must fully redirect, otherwise FB simply won't authorise them. Redirect to the login url using target=top , and this should allow users to authorise themselves/log in.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 (希望可以解决问题)ma和mb文件无法正常打开,打开后是空白,但是有正常内存占用,但可以在打开Maya应用程序后打开场景ma和mb格式。
  • ¥20 ML307A在使用AT命令连接EMQX平台的MQTT时被拒绝
  • ¥20 腾讯企业邮箱邮件可以恢复么
  • ¥15 有人知道怎么将自己的迁移策略布到edgecloudsim上使用吗?
  • ¥15 错误 LNK2001 无法解析的外部符号
  • ¥50 安装pyaudiokits失败
  • ¥15 计组这些题应该咋做呀
  • ¥60 更换迈创SOL6M4AE卡的时候,驱动要重新装才能使用,怎么解决?
  • ¥15 让node服务器有自动加载文件的功能
  • ¥15 jmeter脚本回放有的是对的有的是错的