Question

We are stuck into a scenario where the Facebook app we just finished building has to reside inside of a parent iFrame. (This was an unknown to us until now)
We are wondering if there is an way to easily build the PHP Facebook Object and the JavaScript Facebook Object by only using the ‘signed_request’ token.
If not, would it make any sense to try and get the parent iFrame to send us the facebook cookies somehow and us setting those same cookies and then trying to build the objects?

Any help on this would be extremely appreciated as we are stuck very few days before launching.

Answer 1

The Facebook object is constructed locally. It desn’t even need a signed_request.
I believe it will be enough to pass the signed request as $_GET parameter to internal frame so Facebook class can pick it from there:

  public function getSignedRequest() {
    if (!$this->signedRequest) {
      if (isset($_REQUEST['signed_request'])) {
        $this->signedRequest = $this->parseSignedRequest(
          $_REQUEST['signed_request']);
      } else if (isset($_COOKIE[$this->getSignedRequestCookieName()])) {
        $this->signedRequest = $this->parseSignedRequest(
          $_COOKIE[$this->getSignedRequestCookieName()]);
      }
    }
    return $this->signedRequest;
  }

setAccessToken is a public function, so it would be no problem to use it as well if you need an access token.

Sadly I’m not good enough to give you an advice for JavaScript 🙁