A question about security of Facebook registration -


I use Facebook registration to allow people to use my Facebook credentials / login to my site I am planning.

The description can be seen here:

The documentation says that when a user logs in to Facebook, then Facebook will set an online event and I will use this incident Users can login to their site.

My question is, if I have removed the incident, then tell the user to log in to my website, would any user enter into any user by cheating on my javascript call? Is not it easy to do?

What is the best practice to do in this case? Or is this thing naturally safe?

(Or should any other service be used for login / registration instead of the Facebook registration plugin)?

This event is very scary, but after finding that ping, actually someone can log on to For, you should use JS SDK FB.login () which calls Facebook to validate the current user's cookies, which then gives you their UID and AccessToken.

Comments