Facebooker talk - May 2008 - Using forms in Facebook(er)

Hi, 

I just ran across an interesting occurrence and maybe this is well know but
I thought I''d ask about it.

 

I have a form in my canvaspage . I had set the method to "GET" and I
kept
getting an IncorrectSignature exception in the facebooker plugin.  When I
change the method type to "POST" lo and behold things work.  No
exception.

 

I don''t understand why.  I''m starting to dig into this and was
wondering if
anyone had any thoughts on how to figure out why this is happening?  Do you
think it''s a facebook or facebooker or user(me) issue?  

 

Any ideas would be most appreciated.

Thanks a bunch!

Jay

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://rubyforge.org/pipermail/facebooker-talk/attachments/20080512/a47eb165/attachment.html>

On 12-May-08, at 13:52 , Jay McGaffigan wrote:
> Hi,
> I just ran across an interesting occurrence and maybe this is well  
> know but I thought I?d ask about it.
>
> I have a form in my canvaspage . I had set the method to ?GET? and I  
> kept getting an IncorrectSignature exception in the facebooker  
> plugin.  When I change the method type to ?POST? lo and behold  
> things work.  No exception.
>
> I don?t understand why.  I?m starting to dig into this and was  
> wondering if anyone had any thoughts on how to figure out why this  
> is happening?  Do you think it?s a facebook or facebooker or  
> user(me) issue?
As best I can tell, it''s a bug:

   http://bugs.developers.facebook.com/show_bug.cgi?id=544

When I use a hand-specified URL, like:

   http://apps.facebook.com/myapp/search?foo=bar

that GET works, but a GET form with a foo param raises  
IncorrectSignature. I worked around this by having my GET form call an  
"unprotected" action (doesn''t validate the FB params), which
redirects
to a URL like the above, e.g.:

   def search
     redirect_to "http:// 
apps.facebook.com#{Facebooker.facebook_path_prefix}/merchants/searchfb? 
l=#{CGI.escape(params[:l])}&q=#{CGI.escape(params[:q])}"
   end

Odd, brutish, functional.

Cheers,

Brad