[Facebooker-talk] Session Best Practices

William Thomas
2008-06-13T14:28:20Z

In general I am using Facebooker to access the list of friends a user has. I am
using the Facebook session store so I can update a Facebook user''s
status from my server. Eventually I would like to be able to access a Facebook
user''s groups and events.

Reading more - it looks like facebooker may want to support the
facebook.users.hasAppPermission call to determine the application''s
permission.

Second- it looks like my session concerns will become moot after July 15th, as
user.setStaus will not require a session key either.

The facebook_authentication plugin sounds interesting. I think it may match the
new FB api coming out - since they are not requiring sessions for a good amount
of calls.

--- On Fri, 6/13/08, Mike Mangino &lt;mmangino at elevatedrails.com&gt;
wrote:
From: Mike Mangino &lt;mmangino at elevatedrails.com&gt;
Subject: Re: [Facebooker-talk] Session Best Practices
To: "Joel Watson" &lt;joel at i5labs.com&gt;
Cc: facebooker-talk at rubyforge.org
Date: Friday, June 13, 2008, 8:41 AM

Can every chime in and say what you use a stored session
 for?

Right now, we use them for messaging, profile updates and feeds.
Messaging and feeds no longer need the session key, but feeds do. I''ll
probably change my code to store the session key and its expiration
date.

How would everybody feel about a facebook_authentication plugin? It
would be similar to restful_authentication, but for Facebook
applications. I can do an extraction of our code that is in use for
millions of users. Would that be helpful?

Mike



On Jun 12, 2008, at 6:27 PM, Joel Watson wrote:

&gt; I''m not sure exactly how this will work, but will affect the
app
I''m
&gt; working on as well. The official post about this change is located
&gt; here:
&gt;
&gt; http://developers.facebook.com/news.php?blog=1&amp;story=118
&gt;
&gt; It appears as though you''ll be able to get a new user session
&gt; without already having an infinite session key via
 the
&gt; Auth.getSession method. It also appears as though you''ll be
able to
&gt; do Profile.setFBML without an existing session key as well. As I
&gt; said though, I''m not 100% sure how this will work. If anyone
out
&gt; there has a better idea, please chime in! I''ll probably be
playing
&gt; around with this some time in the next week or two in any case.
&gt;
&gt; -Joel

--
Mike Mangino
http://www.elevatedrails.com



_______________________________________________
Facebooker-talk mailing list
Facebooker-talk at rubyforge.org
http://rubyforge.org/mailman/listinfo/facebooker-talk



-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://rubyforge.org/pipermail/facebooker-talk/attachments/20080613/00114e9f/attachment.html>