Displaying 15 results from an estimated 15 matches for "fb_sig".
2007 Dec 08
3
Uploading photos using facebook & attachment_fu
Hi All,
I''m trying to use a form to upload a photo that I will save using
attachment_fu. I''m very new to Facebookr so I apologize if this is covered
somewhere, but I''m kind of stumped.
Here''s what I''m doing now:
<% facebook_form_for(:my_object, :url => { :action => ''upload_photo'', :id =>
params[:id] }, :html => {
2008 May 15
3
Facebooker support for iframe apps
Hi facebooker-ers,
It looks to me like facebooker does not currently support iframe
facebook apps - or am I missing something?
My first problem as I understand it is as follows - When you are
logged into facebook, and access a facebook application,
facebook tacks on a whole lot of extra fb_sig parameters to the
request (including fb_sig_user) that the application can then
validate to authenticate the user. ( via a frustratingly poorly
documented algorithm )
I found that for my facebook application that uses an iframe,
facebooker didn''t seem to be performing this validation.
Di...
2007 Nov 29
7
Sessions Not Working In Production Mode
I am completely stumped by this problem, and would welcome any
suggestions people could provide.
My application uses active-record-based sessions. In development mode,
the app works fine with sessions, no problems. But in production mode,
the process works for a while (a few hours, maybe more), but at a
certain point the session mechanism stop working.
It looks like the system stops storing new
2008 Aug 21
4
forgery Protection
Has anybody solved this issue. [
http://rubyforge.org/pipermail/facebooker-talk/2008-April/000552.html ] ?
NameError (undefined local variable or method `controller'' for
#<LeaveController:0xb7144abc>):
/app/controllers/application.rb:24:in `verify_authenticity_token''
2008 May 08
0
New test helpers
Hey guys-
A few methods useful for testing have been added to trunk:
1) facebook_post
For use in controller unit tests and integration tests. Basically, it
delegates to the standard "post" method for simulating post requests
in a test, but constructs mock fb_sig params and passes them along to
the requested action with the rest of the params that the test
specifies.
2) assert_facebook_redirect_to
Takes a URL as an argument, extracts the redirection URL from an
fb:redirect tag, and asserts the two are equal.
NOTE: This method replaces assert_fb_redirect_to...
2008 Sep 08
0
InvalidAuthenticityToken when user adds application through facebook registration
...Tesster! Your account has been created.
[application] has been added to your account.
Facebook also issues a post request similar to the following:
Processing HomeController#index (for 127.0.0.1 at 2008-09-08 16:36:48)
[POST]
Session ID: b3286f3c51ba8da745b45732-1487557007
Parameters: {"fb_sig_time"=>"1220917013.3643",
"fb_sig"=>"95fcf4dabcc91059e5c8452155708142", "installed"=>"1",
"action"=>"inde
x", "fb_sig_session_key"=>"b3286f3c51ba8da745b45732-1487557007",
"auth_token&q...
2007 Dec 11
0
before_filter work around
...solve to the default
route of "/" i''ve written a little before filter that seems to make
these two exist OK.
def is_facebook_request?
redirect_to(params.merge({ :controller => ''facebook_accounts'' }))
and return false if params.include?(''fb_sig'')
end
I just merge my facebook controller into the params hash and
redirect to the facebook controller for methods which try and resolve
to the default "/" actions.
Hope that is helpful to someone besides me ;-)
Later,
Mark
2008 Mar 11
0
detecting if in the FB canvas
I have been checking the params for params[:fb_sig] to detect if the
client is in the Facebook canvas, but those don''t work at the
beginning of a controller when you''re calling before_filters.
I have a require_login in the before_filter, but I want to skip it if
the user is from Facebook. So are there any other ways to check that...
2008 Mar 11
0
Facebooker-talk Digest, Vol 5, Issue 12
...def set_user_facebook_id(fb_id)
@fb_id = fb_id
end
# makes a request as if it was from facebook. Need to
set_user_facebook_id() first
# so it knows whom to send the request as.
def facebook_request(http_verb, action, params = { })
fb_params = { "fb_sig_time" => Time.now.to_f,
"fb_sig_locale" => "en_US",
"fb_sig_session_key" => "d82ebe8648254d4cef7d993a-1953401",
"fb_sig_position_fix" => "1",
"fb_sig_in_canvas" => "...
2008 Mar 11
0
Facebook_request in unit tests
...request
def set_user_facebook_id(fb_id)
@fb_id = fb_id
end
# makes a request as if it was from facebook. Need to
set_user_facebook_id() first
# so it knows whom to send the request as.
def facebook_request(http_verb, action, params = { })
fb_params = { "fb_sig_time" => Time.now.to_f,
"fb_sig_locale" => "en_US",
"fb_sig_session_key" => "d82ebe8648254d4cef7d993a-1953401",
"fb_sig_position_fix" => "1",
"fb_sig_in_canvas" => "1&q...
2008 Mar 16
0
bypassing verify_authenticity_token before_filter when in facebook
...of Facebook.
Here is a small extension i wrote for the ForgeryProtection module.
ActionController::RequestForgeryProtection.module_eval do
alias :original_verify_authenticity_token :verify_authenticity_token
def verify_authenticity_token(*args)
if controller.params.include?(''fb_sig'') && controller.action ==
''sekret_method''
# Pretend to call this before_filter.
true
else
original_verify_authenticity_token(*args)
end
end
end
I detailed the particulars for the how and why in a blog post incase
any of you a...
2008 Mar 27
0
handling post-remove URL / uninstall of application
...move]
ensure_authenticated_to_facebook [:except => :post_remove]
before_filter :get_user, :except => :post_remove
Now I''ve defined something like this in my controller:
def post_remove
if request.post?
raise "Incorrect API Key" unless params[''fb_sig_api_key''] ==
Facebooker::Session.api_key #session[:facebook_session].api_key
my_user = WebUser.find_by_facebook_uid params[''fb_sig_user'']
WebUser.destroy my_user
end
end
Unfortunately the call to Facebooker::Session.api_key isn''t working,...
2008 Jun 03
2
Order of authentication methods is causing unnecessary call to API?
Hey Guys,
I am wondering if I am missing something here. I am noticing that after a
user installs my app I get a request that not only contains an auth_key but
also contains a valid session key.
Occasionally I am seeing that Facebook server is occasionally sending a
connection reset during the auth key authentication method, this caused me
to notice that secure_with_token is given precedence in
2008 Apr 09
3
form_tag and form_for cause #protect_from_forgery errors
Hey All,
I''m trying to do a simple form_for (and I also get it with form_tag)
and I''m getting the following error:
ActionView::TemplateError (No :secret given to the
#protect_from_forgery call. Set that or use a session store capable
of generating its own keys (Cookie Session Store).) on line #2 of
users/new.fbml.erb:
1: <h1>Welcome To Courses, Let''s Get
2008 Mar 10
15
facebooker is rewriting URLs even off of facebook canvas
The URLs for CSS/JS files are being rewritten to the address specified
in the tunnel even when outside of the facebook canvas. Is anyone else
having this problem?