用于 OAuth 身份验证的 Facebook 代码参数

Question

我构建了一个 FB 应用程序，它执行以下操作：

1) 将初始请求重定向到FB，以便进行身份验证/登录，如下：

https://www.facebook.com/dialog/oauth?client_id=MYAPPID&redirect_uri=http://localhost:8080/FB/servlet&scope=read_stream&response_type=code

2）在servlet中，获取“code”参数（即signed_request？）：

 String signedReq = request.getParameter("code");

// the String retrieved from the code parameter is:
//3DaDJXq1Mlsq67GbeudlUxu7bY5Um4hSJlwzoPCHhp4.eyJpdiI6Ikc1ODNuRjZXbnhCb0hUV1FEMVNTQUEifQ._iXKxSGiNHfc-i5fRO35ny6hZ03DcLwu4bpAkslqoZk6OfxW5Uo36HwhUH2Gwm2byPh5rVp2kKCNS6EoPEZJzsqdhZ_MhuUD8WGky1dx5J-qNOUqQK9uNM4HG4ziSgFaAV8mzMGeUeRo8KSL0tcKuq

//此参数在实际“代码”的末尾包含'#_= _'，但我无法得到它 通过request.getParameter("code");这是一个java web app。

Answer 1

复制自Facebook API's OAuth Page

With this code in hand, you can proceed to the next step, app authentication, to gain the access token you need to make API calls. In order to authenticate your app, you must pass the authorization code and your app secret to the Graph API token endpoint - along with the exact same redirect_uri used above - at https://graph.facebook.com/oauth/access_token. The app secret is available from the Developer App and should not be shared with anyone or embedded in any code that you will distribute (you should use the client-side flow for these scenarios).

https://graph.facebook.com/oauth/access_token? client_id=YOUR_APP_ID&redirect_uri=YOUR_URL& client_secret=YOUR_APP_SECRET&code=THE_CODE_FROM_ABOVE

If your app is successfully authenticated and the authorization code from the user is valid, the authorization server will return the access token.

是的，这对于 OAuth 来说是相当标准的。获取成功代码，将其打入上面的 url（带有适当的 client_id、client_secret 和 redirect_uri），你应该是现金。你会得到一个访问令牌，从那里开始派对时间。

阅读那篇 Facebook API 文章。这是非常有用的。如果您对此有任何疑问，我很乐意提供帮助。

祝你好运:)