-
-
Notifications
You must be signed in to change notification settings - Fork 180
Description
Trying to update to Facebook Limited Login with an iOS client, which now returns a JWT authentication token that conforms to Open ID Connect.
https://developers.facebook.com/docs/facebook-login/limited-login/
https://developers.facebook.com/docs/facebook-login/limited-login/token/#jwks
My server was previously using a passport-facebook-token strategy to authenticate mobile app users, using the access_token return by the Facebook Login SDK.
Now that things have changed due to privacy and FBSDK 17, this access token is invalid if the user denies App Tracking.
The alternative is to use a newer Facebook Login API that returns:
Limited Login returns an AuthenticationToken that wraps an OpenID Connect token.
Was thinking, could this OpenID Connect token be passed to passport-openidconnect to continue the authentication?
Seems it needs a tokenURL but I have the token.