Question

I’m developing on an app for Android where the user is able to login with his Facebook account. Also, i want to store some input of the user in a mysql database. On the server side, i know will check wether the user has logged in with Facebook (in reason of security risks) so that just users which has logged in with Facebook can access the database. How will i manage this? The Facebook authentication is no problem for me, but i don’t have a solution to check the login status on my website. Thanks for your help!

Answer 1

You need to save / share the AccessToken. Consider the access token like a Session ID in PHP.

In PHP, using the SDK, you need getAccessToken() and setAccessToken() functions (also tell the Facebook API not to use cookies)* and you share this value.

For Mobile, I’ve not used Facebook Auth in Android Java, but I have with Titanium for mobiles, and the calls are exactly the same (Titanium.Facebook.getAccessToken). Works very smoothly when you pass it back ot PHP. The Facebook Java SDK also has

public String getAccessToken() {        return mAccessToken;    }
public void setAccessToken(String token) {        mAccessToken = token;        mLastAccessUpdate = System.currentTimeMillis();    }

in the Facebook class. So you’ll need to use those calls or whatever SDK your are using for Android.

• Warning: There is a flaw in the PHP Facebok SDK that if you call “setAccessToken” with an invalid token (which is common) and you’re not using cookies, then the Facebook API deletes all your session data. If you use sessions for somethign else, you need to be aware of this.