Question

任何人都有代码来验证从 FB.getLoginStatus 返回的响应？这是一个示例响应。

{ "session":{
  "uid":"000000000000000",
  "session_key":"0.aaaaaaaaaaaaaaa0.0000.0000000000.0-000000000000000",
  "secret":"aa0a0_aaaaa0_aa0aaaaaa__",
  "expires":0000000000,
  "base_domain":"foo.com",
  "access_token":"000000000000000|0.aaaaaaaaaaaaaaa0.0000.0000000000.0-000000000000000|0aaa0aaaaaa00aaaaaa0aaaa-0a",
  "sig":"00aa0a0000000000a00a00aaa00a00a0"
  },
  "status":"connected",
  "perms":"{"extended":["email","contact_email"],"user":["user_birthday"],"friends":[]}"
}

如何验证签名，密码等？我有FB App Secret，但不确定需要什么（HMACSHA256）来匹配 sig 值？

感谢您的帮助。

Answer 1

修复，在FB.init（）中使用新的oauth param，然后使用注册中的示例等验证签名请求

https://developers.facebook.com/blog/post/525/

验证FB.getLoginStatus的签名响应

1 个答案: