Facebook :: Access Token Secret?
Mar 26, 2012
I'm using the actionscript api for a flash application on the web. I would like to perform actions which require an access token, but I'm unsure of the security implications of using this in flash (which can be decompiled). Is the access token something I need to keep secret?
N.B. Specifically I'm trying to post game achievements which require the app's access token to be passed. But I'm not sure how I can do this securely from flash (or whether this is not an issue).
View 1 Replies
Similar Posts:
Jan 3, 2012
I looked all over facebook api docs for FLEX and i couldnt find a way to obtain a new access token, can anyone please guide me how to that?By the way , the only time I get error "access token" is when I try to get information from the api and using the parameter "since".when I use this call, im getting a token error massage [code]and when im using it without since FacebookDesktop.api("me/likes",handleFeed);
View 1 Replies
Jun 28, 2011
I am creating Air (AS3) project. It will be have own system of protection. All data from the server to the application and back is encrypted. I use a secret key which is registered in a server-side scripts and in the application. If a hacker decompiled the app, it can find out the secret key. The secret key is the string (constant). I do not want to make obfuscation for my application.
How can I hide this secret key? Can I obfuscate only it? Can I obfuscate separate AS3 class with secret data and then access to it from the main code when needed?
View 2 Replies
Apr 11, 2012
I am newbie to faceook with as3. how I started ? tutorial ? I purpose accessing to facebook album ? What should be my My first step?
View 1 Replies
Oct 24, 2010
I'm currently building an application using the Adobe Facebook API and I've run into an issue where for the login method the Facebook login popup displays but when doing a Facebook share/post the popup is blocked.
This code works fine and displays me a Facebook login popup without question (Firefox):
var permissions:Array = ['publish_stream'];
Facebook.login( onFacebookLogin, { perms:permissions.join(',') } );
However, the following code running in the same application throws up a popup blocker (again Firefox):
Facebook.ui( "stream.publish", "popup", params );
Does anyone know of a work around this issue to make the share popup come up just like the login popup?
View 2 Replies
Feb 15, 2011
Here's what I want to do: when a player wins a game (coded in flash/actionscript), they are given a personalized secret key, which they can email to me in exchange for a prize. I can then validate the key on my end using a private algorithm. I need to design it so that it is practically impossible for hackers to generate a valid prize key without winning the game.
I assume that any SWF file is basically vulnerable to decompilation, but I don't know exactly how vulnerable they are. Perhaps any algorithm for generating a valid key will be accessible to hackers? I have at my disposal all the methods in actionscript 3, as well as a PHP/MySQL server, and I control the server where the game will be hosted.
View 5 Replies
Nov 23, 2011
I have an AIR app using GraphAPI_Desktop_1_8_1.swc to access FacebookDesktop. I call FacebookDesktop.login eg: FacebookDesktop.login(handleLogin);and all is good, the login window opens and the user logs in. But! when I add extra permission, for example: FacebookDesktop.login(handleLogin,{perms:"publish_stream"}); In the 'handleLogin' callback function I get the following error: message, An active access token must be used to query information about the current user.
View 2 Replies
Dec 7, 2009
I have a flash game embedded on Facebook but need access to the flashvars facebook passes to all embedded games. However I am using the mochiads preloader meaning that _root.fb_sig_user is always undefined?How do I get to the variables?stage.loaderInfo.parameters.fb_sig_user
View 1 Replies
Jul 2, 2010
I wan't to do an authentification system with fms using the token concept.I don't know how???
View 9 Replies
Dec 7, 2009
I am creating a website which will contain both ASP.NET pages and a Flash applet.I want to encapsulate my business logic in a WCF service which will be exposed through two endpoints: One accesssible over the Internet through HTTP(S), for use by the Flash client, and one accessible within the data center for use by the application servers.If this does not seem like a good approach, then stop me here; otherwise, I'll move on...
The question is how to authenticate requests coming from the Flash client. Since I don't want to store the user's password in a browser cookie, don't want to send the password with every request, and don't want to have to use HTTPS after the initial login, I plan on using a token-based authentication system. I also don't want the user to have to log into the Flash client after already logging into the site itself, so I plan on using Javascript to pass the token to the Flash client when it starts.
I know WCF supports using the .NET Framework's built-in security framework (System.Security) to enforce access control, and I would like to take advantage of this.The question, then, is: How do I pass the token to the WCF service when it is called by Flash, and how do I process the token on the server? WCF has an "issued token" authentication mode, but it appears this is intended to be used in a full-blown federation scenario with a Secure Token Service and SAML tokens--a bit more complexity that I really want. It is possible to use this mode with my own "simple random-string" tokens? If so, how? Keep in mind this needs to be compatible with Flash.I could potentially pass the token in a header (either a SOAP header or an HTTP header). In this case, once I've determined which user is making the request, how do I inform the framework so that the System.Security checks will work?Is there a different approach altogether that I should consider?Anything that avoids sending passwords in every request, lets me use System.Security, and works with Flash is a possibility.
View 1 Replies
Feb 25, 2011
i was wondering if anyone have experience with this, I'm planning to do a security token app for the iphone to access a server, but i have no idea where to start, the security token im talking about is like the blizzard authenticator or bank tokens, they produce a code that last for 1 minute and allow a login, but my question is how does the system work?
View 0 Replies
Mar 31, 2011
rtmp connect takes a token. My connect looks like below.
connect(server,"123456789");
Using fmscheck I am not able to pass token in the query string so that in my connect I can access the token.How would I use fmscheck to pass a token so that my connect so that onConnect will have a token.
application.onConnect = function(new_client,token) // token -> 123456789
{
}
View 3 Replies
Mar 26, 2012
I have a page with multiple YouTube embedded players that I need to listen for events on. I am trying to use the solution posted as the answer to Using Youtube's javascript API with jQuery, but I am getting a strange error: (in Chrome 18.0.1025.137 beta-m)Uncaught SyntaxError: Unexpected token %That is the extent of the error, including stacktrace. My code is like this:
var onYouTubePlayerReady = function (id) {
var evt = '(function(){})';
alert(eval(evt)); //just to verify that the snippet is syntactically correct
[code]....
View 1 Replies
Mar 4, 2012
I have been making huge strides in learning Flex and I am very much enjoying it, however,one thing I cannot find is how to bind results from a query in Flex. I have managed to create lists etc no problem but when I try to bind one specific value to a variable, it does not work.First off, here is my PHP function:
public function getRepnameByUsername($itemID) {
$stmt = mysqli_prepare($this->connection, "SELECT * FROM $this->tablename where Username=?");
[code]......
View 1 Replies
Aug 11, 2009
We've got a project in our ActionScript class which is a TOKEN RING or on how the token ring works. Now, our teacher just gave us 2 weeks to finish this project and he doesn't even started teaching the basics of actionscript that's why we really don't know how to start this project. Keep up the good work. What I really need now is the code in actionscript.
View 3 Replies
Jun 1, 2009
I'm trying to determine the practical difference between using the com.facebook.session.WebSession and com.facebook.session.JSSession. The documentation ([URL]) has more around WebSession - but the example I have which is closest to what solution I'm trying to implement uses JSSession and it looks like I could avoid all of the JavaScript pass-through & ExternalInterface calls I'm making. It appears that the benefit of using this new ActionScript Facebook API is to avoid having to make all of the Facebook calls via JavaScript.
View 5 Replies
Mar 13, 2011
I have literally spent HOURS trying to solve this mystery... but simply can't seem to get hold of it.
I am using the same code lines (literally!) as the example here (official adobe tutorial) and I get different result.
[Code]...
Everything works fine, i.e. everything till it is time to fire the loggedin event. I get asked to log in and all permissions are asked correctly. After I log myself in to facebook, the loggedin event doesn't fire. Is there any way of solving this problem??
View 1 Replies
Sep 24, 2009
I am using a Flex widget for my facebook application. How can I get the current user's facebook ID?
View 1 Replies
Jan 13, 2012
i need to connect to have a button on my website that connects to facebook (if not already logged in) and posts to the users wall.I've only done this from within an iFrame - do i still need AppId etc etc?
View 1 Replies
Apr 4, 2012
I have a facebook application where the user choose 4 of his friends and then it creates a video (swf) with the pictures of your friends in it (loaded via xml). So I need to share this video on the user timeline. Everything works fine but the video is not embedded in the post on his timeline, there is only a post with the link to the page in it.The weird thing is, if I post the url directly on my timeline, the video is embedded, but not if the same link is posted via the application.here is my code called by the share button in js :
function postToFeed() {
var obj = {
method: 'feed',[code].........
View 1 Replies
Dec 6, 2011
I've recently used the 'Static HTML' application to add autoplaying flash content to a Facebook Page.Nothing too fancy, no sound, and only a few secs long. Now, Facebook say:-"Apps on Pages must not host media that plays automatically without a user's interaction."
What do they mean by 'Media' exactly? I can understand a ban on autoplaying audio content but does the ban extend to something as harmless as an animated GIF? Or more to the point, does an autoplaying .swf file fall under this?
Lastly, what course of action would Facebook take if I did violate this rule? Would they issue a warning (giving me an opportunity to remove the 'offending' item) or would they just shut down my page without any consultation?
View 2 Replies
Sep 24, 2009
I can't find in the Adobe Facebook API how to log the user out of Facebook. The FacebookSessionUtil (and the related sessions and Facebook classes) all have a .logout() function, which will invalidate the user's current *session* within the swf, but it doesn't log the user out of Facebook.
What am I missing here? How are you supposed to log the user out of Facebook with this API? Since it's part of the TOS for Facebook Connect apps, you'd think this would be available in the API somewhere.
View 0 Replies
Nov 8, 2011
After I upload a photo on a desktop facebook application i need to store it's post id in a database. From the facebook ActionScript SDK documentation:pi() methodpublic static function api(method:String, callback:Function, params:* = null, requestMethod:String = GET):voidMakes a new request on the Facebook Graph API.Parameters [...]callback:Function — Method that will be called when this request is complete The handler must have the signature of callback(result:Object, fail:Object); On success, result will be the object data returned from Facebook. On fail, result will be null and fail will contain information about the error.
So I implemented my callback function as follows:
protected function handleUploadComplete(response:Object, fail:Object):void{
status = (response) ? 'Success' : 'Error';
[code].....
View 1 Replies
Oct 20, 2010
It's too complicate to explain but I'll give you an example
I have an AS3 ResultEvent Object and this object has several propeties which can be accessed by this like:event.result.name or event.result.age and, I have this String variable: eventProperty:String that contains "name" or "age" How do I access to event.result. with the variable?
View 2 Replies
Oct 22, 2010
So, you have a sprite, you draw some graphics, you set cacheasbitmap=true... I can't seem to access the newly created bitmap data, to access the dispose() method.
[Code]...
View 6 Replies
Oct 14, 2011
Well i developing a Flex desktop app and i cant logout form facebook. I mean after loggin in and updating the photo i want to update, i run the method to log out, which looks like this
FacebookDesktop.logout(handleLogout);
Where handleLogout is a function where i can do other things.The method runs but never log out. I think that maybe loading an other request i could log out, and i find that using:
[URL]
would log out, but i dont know where i ca get the accesToken.
View 1 Replies
Feb 17, 2009
i have a little issue, this is the script:
import flash.net.navigateToURL;
import flash.net.URLRequest;
button.addEventListener(MouseEvent.CLICK, action);
function action(e:MouseEvent):void
{ var request:URLRequest = new URLRequest("novosti.php");
navigateToURL( request, "_self");
}
button is instance name of symbol - button, and like that script doesnot work there is error 1009:cannot access.....but when i put symbol with instance name button in form of movie clip, script works.
View 2 Replies
Apr 27, 2011
I need to add the facebook LIKE button in to my website. But I'm not knowing how to do it. Facebook provides the iFrame and XFBML codes.
How do I get this button in my flash website?
View 6 Replies
Oct 14, 2009
I'm trying to embed a screen recorder into my facebook application, but I am getting errors.
This is the code I used:
<fb:swf swfsrc ="http://www.screentoaster.com/swf/STRecorder.swf" width="950" " height="485" flashvars=" "forward_url=http://youtube.com/videos/watch?video=#{st_video_id}%26user=#{ext_user_id}&st_visibility_on_portal=public&ext_additional_data=Some_useful_infos_for_you&ext_user_id=username"copied over exactly" imgsrc=" http://www.screentoaster.com/swf/STRecorder.swf"> </fb:swf>
but the error I'm getting is that swfsrc is a relative URL.Is there a way to embed a relative url?
View 1 Replies
Nov 14, 2009
I've been messing around a bit with a Facebook application for a while now, which is using FBML. A need has arisen to integrate graphs to display data. From what I can tell my options would be one of the following:
Find a Flash Graph that doesn't require a JavaScript library to work Convert the application to an IFrame application, and hope that Facebook wont break the Graph JavaScript Generate the graph serverside with GD or ImageMagick I would preferably not go with option 3, due to how boring generated graphs look, and serverside load.
Does anyone have any opinions or suggestions on how I would best solve this?
View 2 Replies
