2011-10-15 23:57:45 -04:00
|
|
|
require 'bundler/setup'
|
|
|
|
|
require 'sinatra/base'
|
|
|
|
|
require 'omniauth-facebook'
|
|
|
|
|
|
2011-12-01 16:15:14 -05:00
|
|
|
SCOPE = 'email,read_stream'
|
|
|
|
|
|
2011-10-15 23:57:45 -04:00
|
|
|
class App < Sinatra::Base
|
2012-02-24 03:29:29 -05:00
|
|
|
# turn off sinatra default X-Frame-Options for FB canvas
|
|
|
|
|
set :protection, :except => :frame_options
|
|
|
|
|
|
2011-12-01 16:15:14 -05:00
|
|
|
# server-side flow
|
2011-10-15 23:57:45 -04:00
|
|
|
get '/' do
|
2011-12-01 16:15:14 -05:00
|
|
|
# NOTE: you would just hit this endpoint directly from the browser
|
2012-02-24 03:29:29 -05:00
|
|
|
# in a real app. the redirect is just here to setup the root
|
2011-12-01 16:15:14 -05:00
|
|
|
# path in this example sinatra app.
|
2011-10-15 23:57:45 -04:00
|
|
|
redirect '/auth/facebook'
|
|
|
|
|
end
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2011-12-01 16:15:14 -05:00
|
|
|
# client-side flow
|
|
|
|
|
get '/client-side' do
|
|
|
|
|
content_type 'text/html'
|
|
|
|
|
# NOTE: when you enable cookie below in the FB.init call
|
|
|
|
|
# the GET request in the FB.login callback will send
|
|
|
|
|
# a signed request in a cookie back the OmniAuth callback
|
|
|
|
|
# which will parse out the authorization code and obtain
|
|
|
|
|
# the access_token. This will be the exact same access_token
|
|
|
|
|
# returned to the client in response.authResponse.accessToken.
|
|
|
|
|
<<-END
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<title>Client-side Flow Example</title>
|
|
|
|
|
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.0/jquery.min.js" type="text/javascript"></script>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<div id="fb-root"></div>
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript">
|
|
|
|
|
window.fbAsyncInit = function() {
|
|
|
|
|
FB.init({
|
|
|
|
|
appId : '#{ENV['APP_ID']}',
|
|
|
|
|
status : true, // check login status
|
|
|
|
|
cookie : true, // enable cookies to allow the server to access the session
|
|
|
|
|
xfbml : true // parse XFBML
|
|
|
|
|
});
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
(function(d) {
|
|
|
|
|
var js, id = 'facebook-jssdk'; if (d.getElementById(id)) {return;}
|
|
|
|
|
js = d.createElement('script'); js.id = id; js.async = true;
|
|
|
|
|
js.src = "//connect.facebook.net/en_US/all.js";
|
|
|
|
|
d.getElementsByTagName('head')[0].appendChild(js);
|
|
|
|
|
}(document));
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2011-12-01 16:15:14 -05:00
|
|
|
$(function() {
|
|
|
|
|
$('a').click(function(e) {
|
|
|
|
|
e.preventDefault();
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2011-12-01 16:15:14 -05:00
|
|
|
FB.login(function(response) {
|
|
|
|
|
if (response.authResponse) {
|
2012-02-24 00:50:16 -05:00
|
|
|
$('#connect').html('Connected! Hitting OmniAuth callback (GET /auth/facebook/callback)...');
|
2012-02-24 03:29:29 -05:00
|
|
|
|
|
|
|
|
// since we have cookies enabled, this request will allow omniauth to parse
|
2012-02-24 00:50:16 -05:00
|
|
|
// out the auth code from the signed request in the fbsr_XXX cookie
|
|
|
|
|
$.getJSON('/auth/facebook/callback', function(json) {
|
|
|
|
|
$('#connect').html('Connected! Callback complete.');
|
|
|
|
|
$('#results').html(JSON.stringify(json));
|
|
|
|
|
});
|
2011-12-01 16:15:14 -05:00
|
|
|
}
|
|
|
|
|
}, { scope: '#{SCOPE}' });
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
</script>
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2012-02-24 00:50:16 -05:00
|
|
|
<p id="connect">
|
2011-12-01 16:15:14 -05:00
|
|
|
<a href="#">Connect to FB</a>
|
|
|
|
|
</p>
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2012-02-24 00:50:16 -05:00
|
|
|
<p id="results" />
|
2011-12-01 16:15:14 -05:00
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
END
|
|
|
|
|
end
|
2011-10-15 23:57:45 -04:00
|
|
|
|
2012-02-24 03:29:29 -05:00
|
|
|
# auth via FB canvas and signed request param
|
|
|
|
|
post '/canvas/' do
|
|
|
|
|
# we just redirect to /auth/facebook here which will parse the
|
|
|
|
|
# signed_request FB sends us, asking for auth if the user has
|
|
|
|
|
# not already granted access, or simply moving straight to the
|
|
|
|
|
# callback where they have already granted access.
|
|
|
|
|
#
|
2012-05-05 03:52:11 -04:00
|
|
|
# we pass the state parameter which we can detect in our callback
|
2012-02-24 03:29:29 -05:00
|
|
|
# to do custom rendering/redirection for the canvas app page
|
|
|
|
|
redirect "/auth/facebook?signed_request=#{request.params['signed_request']}&state=canvas"
|
|
|
|
|
end
|
|
|
|
|
|
2011-10-15 23:57:45 -04:00
|
|
|
get '/auth/:provider/callback' do
|
2012-02-24 03:29:29 -05:00
|
|
|
# we can do something special here is +state+ param is canvas
|
2012-05-05 03:52:11 -04:00
|
|
|
# (see notes above in /canvas/ method for more details)
|
2011-10-15 23:57:45 -04:00
|
|
|
content_type 'application/json'
|
|
|
|
|
MultiJson.encode(request.env)
|
|
|
|
|
end
|
2012-02-24 03:29:29 -05:00
|
|
|
|
2011-10-15 23:57:45 -04:00
|
|
|
get '/auth/failure' do
|
|
|
|
|
content_type 'application/json'
|
|
|
|
|
MultiJson.encode(request.env)
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
use Rack::Session::Cookie
|
|
|
|
|
|
|
|
|
|
use OmniAuth::Builder do
|
2011-12-01 16:15:14 -05:00
|
|
|
provider :facebook, ENV['APP_ID'], ENV['APP_SECRET'], :scope => SCOPE
|
2011-10-15 23:57:45 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
|
|
run App.new
|
