Home/ Questions/Q 7458067
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-29T13:24:06+00:00

I have an app with a login screen with a button that invites users

  • 0

I have an app with a login screen with a button that invites users to login using facebook.
That authentication part of the integration works fine. I have also parsed the returned cookie variable to obtain the userID. The next step is to obtain the users information.

I found this stackoverflow article Difficulty parsing string with Facebook one click sign on and ColdFusion which says

Once you get parsed signed_request (stored in your cookie) you can use
user_id (which is Facebook User Id) and oauth_token (aka access_token)
to get needed info via Graph API or FQL.

But, how do you obtain the access_token the poster speaks of? It is not in the cookie variable (that I can see anyway).

Sorry for being such a noob. I got twitter working easy. Facebook is a pain.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    https://developers.facebook.com/docs/authentication/ is your friend. Read the server side flow section.

    “If the user presses Allow, your app is authorized. The OAuth Dialog will redirect (via HTTP 302) the user’s browser to the URL you passed in the redirect_uri parameter with an authorization code:

    http://YOUR_URL?code=A_CODE_GENERATED_BY_SERVER
    With this code in hand, you can proceed to the next step, app authentication, to gain the access token you need to make API calls.

    In order to authenticate your app, you must pass the authorization code and your app secret to the Graph API token endpoint – along with the exact same redirect_uri used above – at https://graph.facebook.com/oauth/access_token. The app secret is available from the Developer App and should not be shared with anyone or embedded in any code that you will distribute (you should use the client-side flow for these scenarios).

    https://graph.facebook.com/oauth/access_token?
         client_id=YOUR_APP_ID&redirect_uri=YOUR_URL&
         client_secret=YOUR_APP_SECRET&code=THE_CODE_FROM_ABOVE
    If your app is successfully authenticated and the authorization code from the user is valid, the authorization server will return the access token:

    In addition to the access token (the access_token parameter), the response contains the number of seconds until the token expires (the expires parameter). Once the token expires, you will need to re-run the steps above to generate a new code and access_token, although if the user has already authorized your app, they will not be prompted to do so again. If your app needs an access token with an infinite expiry time (perhaps to take actions on the user’s behalf after they are not using your app), you can request the offline_access permission.”

    • 0