Rails 4: deauthorize all users in facebook app - facebook-graph-api

I just committed a mistake when developing and now I do not know how to fix it...
Im using Koala for integrate my facebook app with my rails app, I have a staging and a production environment, my mistake is that my staging app was using the same facebook app that was using my production env, so the users do not match, so now in my production env Im getting 'undefined method for nil:nilclass bla blab bla
How can I just deauthorize all users in my facebook app? so I force users to authorize the app again, that way I could fix the problem but I do not know how to do it.
Thanks

The only way I've found de-authorize just one user is manually with curl:
curl -X DELETE "https://graph.facebook.com/me/permissions?access_token=#{token}"
So I think you need valid access token for every user.

Related

Facebook Submit for Login Review but still in Development Mode

I am trying to post to Instagram from within my app. My Facebook Dev app is in Development mode:
I can log in to Facebook and post/share to Facebook Pages, Groups and profiles from within my app so happy with that. I am now trying to post/share to Instagram so I am calling the FB.login as follows:
Where the method PostToInstagram() ultimately is doing this:
However when I attempt to call this, I get the FB Login popup, I click to post but I keep getting the error:
(#10) Application does not have permission for this action
On the popup, I have the option to change the FB/Instagram settings, when I try saving inside here I see:
I would have thought I would be okay as I am still in development mode. My other calls to FB api work fine. Could I be missing any scopes? Any help on this is greatly appreciated!

My website have only login with facebook feature, can I submit it for app review?

I made a website using Django.
The only way to log into it is the facebook login.
When I had to submit my app for review in the facebook developer console. They are asking me testing id and password. Since the only way to login is facebook, and it won't work till they test.
And they are asking how to open this website for testing. It's kind of a loop.
Is there another way out?
I don't want to use other ways of logging in (is in accordance with my idea)
I believe you can test your app with your own login credentials according to Facebook:
You do not need to submit your app if it will only be used in
Development Mode by you or someone with a role on your app. Any
account listed in the Roles tab in your App Dashboard, such as admins,
developers, and testers, can use all permissions but will only be able
to access their own data, that of test users, and test pages belonging
to them.
You can use any of these accounts to test your app and create a
screencast.
See this similar answer.

Facebook App versus Facebook Owner Profile

I'm planning to build an app that gets my friends (I am the app owner). I don't need people to login or anything. The app is just for me. Question: do I need to ask for permissions or an app id and app secret should suffice? Facebook documentation for developers does not seem to cover this specific case...
Thank you in advance!

Authenticate Facebook users in Cakephp 3x

I have used PHP SDK-4 for Facebook login in CakePHP 3 (beta version) which works fine.Now, I'm in need to fetch user data based on FB login and authenticate users. Am trying with Cake's Auth component. Initially, while trying to Auth users,
$this->Auth->setUser($user)
Got Error: Session was already started as we require session_start() for Facebook login. 1- Tried with enter link description here, and sessions [session_write_close()] etc..still it did not work. Could I get some shot on best way to authenticate users with Facebook login in site?
CakePHPs sessions are lazy started, that is, they are being started once your try to access the session in some way, and in case the session was started manually in beforehand, you'll receive that error, see Session::start().
You can easily workaround this by manually starting the session via CakePHP. The session object is available in the current request, so for example in your controller before using the SDK you could simply do something like
$this->request->session()->start();
and then the Facebook SDK should be able to pick it up.
As burzum already mentioned in the comments, the authentication should better be wrapped up in an authentication handler.
I would suggest having a look at HybridAuth, there's also a CakePHP plugin for seamless integration into CakePHPs auth mechanism, this might give you some ideas for a custom implemenation in case you need to use the v4 SDK, which isn't yet supported by HybridAuth.

how to get username and domain of windows logged in client using python code?

when user logs in to his desktop windows os authenticates him against Active Directory Server.
so Whenever he accesses a web page he should not be thrown a login page for entering his userid or password.Instead, his userid and domain need to be captured from his desktop and passed to the web server.(let him enter password after that)
Is this possible in python to get username and domain of of client?
win32api.GetUserName() gives the username of the server side.
Thanks in advance
Hmm... what you probably want to do is use Django's RemoteUserMiddleware and leave user authentication to the Web Server which can then be configured to handle it. The solution from Ntlm/Kerberos authentication in Django should work, but as mentioned it's a bit quirky - not all browsers support it correctly, and you have to modify browser settings for it to work.
What you want to do is called Single sign on (SSO) and it's much easier to implement on actual web server than Django.
So, you should check how to do SSO on Apache/Nginx/whateverYouAreUsing, then the web server will forward the authenticated username to your django app.
This sounds like a javascript question to me. I think you'll have to add javascript to your login page that attempts to access the details and returns them to the server.
I would have thought that there would be security measures to prevent this, however this question suggests others have managed something similar.
UPDATE
It looks like there might be some useful information in the django docs