Skip to content

Integrate with Facebook Limited Login wrapped OIDC token #112

@ricsantos

Description

@ricsantos

Trying to update to Facebook Limited Login with an iOS client, which now returns a JWT authentication token that conforms to Open ID Connect.

https://developers.facebook.com/docs/facebook-login/limited-login/

https://developers.facebook.com/docs/facebook-login/limited-login/token/#jwks

My server was previously using a passport-facebook-token strategy to authenticate mobile app users, using the access_token return by the Facebook Login SDK.

Now that things have changed due to privacy and FBSDK 17, this access token is invalid if the user denies App Tracking.

The alternative is to use a newer Facebook Login API that returns:

Limited Login returns an AuthenticationToken that wraps an OpenID Connect token.

Was thinking, could this OpenID Connect token be passed to passport-openidconnect to continue the authentication?

Seems it needs a tokenURL but I have the token.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions