Facebook canvas authentication strategy for Passport.
Use this strategy to log users in to your Facebook Canvas app automatically.
Note: This strategy simply augments passport-facebook, if you don't need Facebook Canvas support you should use that module instead.
npm install passport-facebook-canvas --save
Facebook has deprecated
Canvas Url in favour of
Secure Canvas Url and so requires setting up an SSL cert. You can produce a
self-signed certificate with a command such as this: (don't set a password for a testing cert)
# Ubuntusudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout self_signed_ssl.key -out self_signed_ssl.crt
Then you must tell
express to listen on another port, something like this:
var certificate =key: fscert: fshttp;https;
Configuration is exactly the same as with passport-facebook except the module name is
'passport-facebook-canvas' instead of
var FacebookStrategy = ;passport;
Configuration is exactly the same as with passport-facebook except the strategy name is
'facebook-canvas' instead of
This is the
Secure Canvas Url route that Facebook will POST data to.
Note If this is the first time the app has seen this user then redirect to
We cannot forward the user to another URL via HTTP redirect so we have to use a client-side js hack instead.
Please suggest a better solution: https://developers.facebook.com/docs/appsonfacebook/tutorial/#canvas
Now you should be able to navigate to your app page: https://apps.facebook.com/myapp/ and be prompted to approve the app. On subsequent visits you should be logged in automatically.
(The MIT License)
Copyright (c) 2013 Peter Johnson <@insertcoffee>
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.