Question

After authentication facebook app redirecting my inner page to HTTP despite it is https://apps.facebook.com/myappname

i provide redirect_uri to http://mysite.com/welcome.aspx

https://www.facebook.com/dialog/oauth?client_id=XXX&redirect_uri=http://mysite.com/welcome.aspx&scope=user_hometown,user_location,email,user_birthday,status_update,publish_stream,read_stream,user_about_me,offline_access,user_likes,read_mailbox,user_online_presence,read_requests&response_type=code

how can i manage it to if http then http else https???

Answer 1

Starting from 1. October 2011. Facebook forced usage of HTTPs protocol for communication with 3th party applications. I would recommend using HTTPs even if it’s possible usage of HTTP, this method will ensure no Security Exceptions or warnings will be show users access your application… so redirect URI should be https://mysite.com/welcome.aspx, of course server would need to support protocol, and have certificate, at least self-signed for testing.