Question

现在我正在使用Facebook SDK v5.0 按“登录Facebook”后，它会自动重定向到“callback.php” 应该发出长期存取令牌。但是

每次都会出现此错误。

Facebook SDK returned an error: Cross-site request forgery validation failed. Required param "state" missing.

如果您有任何解决方案可以解决此错误请告诉我。

这是我的代码：callback.php

<html>
<meta charset="UTF-8" content="text/html">
<?php

session_start();
require_once __DIR__ . '/facebook-php-sdk-v4-5.0-dev/src/Facebook/autoload.php';

$fb = new Facebook\Facebook([
  'app_id' => '3xxxxxxxxxxxxxxxxxx7',
  'app_secret' => '0xxxxxxxxxxxxxxxxxxxx7',
  'default_graph_version' => 'v2.4',
  ]);

$helper = $fb->getRedirectLoginHelper();

try {
  $accessToken = $helper->getAccessToken();
} catch(Facebook\Exceptions\FacebookResponseException $e) {
  // When Graph returns an error
  echo 'Graph returned an error: ' . $e->getMessage();
  exit;

} catch(Facebook\Exceptions\FacebookSDKException $e) {
  // When validation fails or other local issues
  echo 'Facebook SDK returned an error: ' . $e->getMessage();
  exit;
}

if (! isset($accessToken)) {
  if ($helper->getError()) {
    header('HTTP/1.0 401 Unauthorized');
    echo "Error: " . $helper->getError() . "\n";
    echo "Error Code: " . $helper->getErrorCode() . "\n";
    echo "Error Reason: " . $helper->getErrorReason() . "\n";
    echo "Error Description: " . $helper->getErrorDescription() . "\n";
  } else {
    header('HTTP/1.0 400 Bad Request');
    echo 'Bad request';
  }
  exit;
}

// Logged in
echo '<h3>Access Token</h3>';
var_dump($accessToken->getValue());

// The OAuth 2.0 client handler helps us manage access tokens
$oAuth2Client = $fb->getOAuth2Client();

// Get the access token metadata from /debug_token
$tokenMetadata = $oAuth2Client->debugToken($accessToken);
echo '<h3>Metadata</h3>';
var_dump($tokenMetadata);

// Validation (these will throw FacebookSDKException's when they fail)
$tokenMetadata->validateAppId($config['app_id']);
// If you know the user ID this access token belongs to, you can validate it here
//$tokenMetadata->validateUserId('123');
$tokenMetadata->validateExpiration();

if (! $accessToken->isLongLived()) {
  // Exchanges a short-lived access token for a long-lived one
  try {
    $accessToken = $oAuth2Client->getLongLivedAccessToken($accessToken);
  } catch (Facebook\Exceptions\FacebookSDKException $e) {
    echo "<p>Error getting long-lived access token: " . $helper->getMessage() . "</p>\n\n";
    exit;
  }

  echo '<h3>Long-lived</h3>';
  var_dump($accessToken->getValue());
}

$_SESSION['fb_access_token'] = (string) $accessToken;

// User is logged in with a long-lived access token.
// You can redirect them to a members-only page.
//header('Location: https://example.com/members.php');
?>
</html>

以防万一，我也发布了这个。：login.php中

<html>
<meta charset="UTF-8" content="text/html">
<?php

session_start();
require_once __DIR__ . '/facebook-php-sdk-v4-5.0-dev/src/Facebook/autoload.php';


$fb = new Facebook\Facebook([
  'app_id' => '3xxxxxxxxxxxxxxxxx7',
  'app_secret' => '0xxxxxxxxxxxxxxxxxxx7',
  'default_graph_version' => 'v2.4',
  ]);
$helper = $fb->getRedirectLoginHelper();

$permissions = ['email']; // Optional permissions
$loginUrl = $helper->getLoginUrl('http://127.0.0.1:8887/fb/fb-callback.php', $permissions);

echo '<a href="' . $loginUrl . '">Log in with Facebook!</a>';

?>

</html>

Answer 1

我没有得到“Cross Site request forgery ...”这段代码错误，只是得到了另一个基本错误，并没有阻止脚本运行。

以下是我为修复基本错误所做的一些更改：

1. Instead of "http://127.0.0.1:8887..." I have used "http://localhost...".   (I'm running XAMPP server this might caused error on this one.)

2. Instead of $config['app_id'] I have used my app id value directly. Like this:

 $app_id = '4xxxxxxxxxxx2';

 $tokenMetadata->validateAppId($app_id);

正如我所说，这些错误并没有阻止脚本运行，因此您应该检查您的Facebook应用程序面板设置和入门部分。

Answer 2

此处已经问过：Facebook SDK returned an error: Cross-site request forgery validation failed. The "state" param from the URL and session do not match，您需要确保正确设置原生PHP会话功能，您可以通过添加以下代码进行检查：die($_SESSION['FBRLH_' . 'state']);

尝试使用Facebook SDK v5.0但出现错误

2 个答案: