Flash :: Php - Facebook Game Authentication
Apr 9, 2012
I need to authorise my Flash game (which runs on Facebook) users against my game server. I'm able to get their data like id, access token, etc, from Facebook on the client (I'm using the Flash Facebook API) but I'm not sure how to authorize them on my game server (e.g. do a login with a database query). One scenario that I have on my mind:
If I could get the same access token from Facebook on both the client (which I already do) and the server (with, for example, a redirect URL, which I tried but does not seems to work), then I could easily compare the two tokens (together with the user IDs) and thus authorize the user. UPDATE To put it simpler, I want to catch the token that is returned from Facebook on the server-side before it gets to the client (it can be a simple PHP script that parses the URL token parameter). Next, store it in the DB on the server, and when the client queries the server, I can do the comparison.
View 2 Replies
Similar Posts:
May 12, 2011
Is there any free Open Source Multiplayer Flash Game (like Happyfarm... in facebook) that I can use and build my own small network?What I'm looking for is the source code of some Multiplayer Flash Game (like http:[url]....for example)I do not know to much thing to talk about it, but if there is some, I hope:
+The game can run without any other system (not a plug-in or mod)
+If there is server-slide script, it should be PHP
+There is an English document for deverloper
View 1 Replies
Aug 26, 2011
What would be steps and technology needed to create a flash board game on Facebook? - something like checkers?
Will all game attributes - like ability to keep score, resume broken games and invite friends?
View 1 Replies
Oct 26, 2011
I'm trying to integrate a Flash Professional/AS3 game into Facebook. The swf is hosted on a secure (https) server. The swf has to connect to a SmartFoxPro socket server on another domain.I'm using the Facebook Actionscript API to interface with Facebook. (Should I use PHP, instead? I read an article that recommends using PHP, because the Actionsrcipt API may not be kept up to date.) When I fire up my app, I get a "Security Information" pop-up box saying that the page contains both secure and nonsecure items. I click "yes" to all the display of the nonsecure items.
Then, I get an "XD Proxy blah-blah-blah" popup. This pop-up goes away, and then my app logs in to my SmartFox server.So... What is this "XD Proxy" window? I think it looks unprofessional, and users may think there's an error with the app. Also, can I block or hide the "Security Information" pop-up? Why don't I see this in other FB apps?
View 1 Replies
Jul 11, 2011
i made flash game in action script 3.0. In my game i have leader score.. i have 2 buttons 1. share on facebook and 2. challenge your friends on facebook.on clicking 1 button it will directly go to facebook and share my score on facebook.And on clicking 2 button my all facebook friends pics will appear with checkbox when i am selecting few of my friends and click on go buttons, the facebook request will go to selected friends only for challenge ... how to do this 2 buttons functionality.
View 1 Replies
Jun 16, 2011
I wish to create a multiplayer game facebook app. A game will have 1 to 4 people in it playing from their own systems. I wish to target, lets say, 10K simultaneous online users. I am planning to write the client side game in Flash. I wanted to know how these clients communicate with each other. Can these clients communicate directly with each other or I should go with "server as middleman" approach? I want the game to work even in "restricted" networks. If server, how do I have things working from google app engine cloud service? I came across channel API, should I use that? Would it work with a flash client?
View 3 Replies
Jul 1, 2011
I just start to learn Flash AS3 and trying to make a Facebook social flash game. How is Facebook flash game divide its data into many parts for loading? For example, it's usually found that if we click on a new item (ex: character cloth, hair, eyes, etc) and drag it into stage, we need to wait for loading it from the ....er the sever(host), is it? what is the system of this and how where can i learn it? So there will be many people playing the game. therefore how can we store the accounts' data and load it when they start? How does the fullscreen system work? two separate flash?
View 2 Replies
Jul 6, 2011
We're currently working on a small scale indie card game for Facebook, which we hope will reach hundreds of thousands of players (eventually). We have most of the issues figured out (scalability, server-side architecture, etc) - however one question - communication between client & server.
We have the following requirements:
Server side push messages (no client message request) High scalability (should support at first hundreds and later hopefully thousands of CCUs) Secure, reliable layer Work well with most computers, routers & browsers Works with Adobe Flash/AS3
First thing that came to mind was socket connections, but I was wondering, is there a better solution that answers our needs?
View 2 Replies
Jun 2, 2010
I want to learn how to make a social game in facebook. How to go about it. I think you would need a team of devs. What languages are used to make social games like farmville, happy aquarium, etc.
View 4 Replies
Apr 25, 2011
feasable protection of my Zend_AMF gateway? I mean, how can I prevent someone from calling my service methods?
View 1 Replies
Oct 24, 2010
I'm currently building an application using the Adobe Facebook API and I've run into an issue where for the login method the Facebook login popup displays but when doing a Facebook share/post the popup is blocked.
This code works fine and displays me a Facebook login popup without question (Firefox):
var permissions:Array = ['publish_stream'];
Facebook.login( onFacebookLogin, { perms:permissions.join(',') } );
However, the following code running in the same application throws up a popup blocker (again Firefox):
Facebook.ui( "stream.publish", "popup", params );
Does anyone know of a work around this issue to make the share popup come up just like the login popup?
View 2 Replies
Mar 16, 2012
I need to develop a isometric game on facebook like farmvillie, barnbuddy or etc. I found couple of frame works (link is here) to develop it, but they not simple as isolib.So I decided to go with as3 isolib. Google project for that is here.
But I could not find a A-Z tutorial for as3 isolib, except basic (adding scenes, adding map and etc).
I want more stuff. So Can you please suggest me a advance as3 isolib tutorial (I googled it 100 times) ?
Anyway if you have suggestion for frame work except isolib to develop isometric game,let me know it also.
View 1 Replies
Mar 20, 2012
i am currently working on a facebook game and i have a problem concerning the integration of a life counter which regenerates over time for a facebook game. The game is a simple Flash/AS3 shooter in which users are competing for the highest score. For monetary reasons every game costs one life and users should only be able to start a new game, if said life counter is >=1. To clear things up, i submitted a link to Popcap's facebook game "Zuma Blitz": ZUMA Blitz I can think of a few ways to do this, but i don't know which is the best/easiest approach. Would it be best to:
[Code]....
View 2 Replies
Mar 20, 2012
i am currently working on a facebook game and i have a problem concerning the integration of a life counter which regenerates over time for a facebook game.The game is a simple Flash/AS3 shooter in which users are competing for the highest score.For monetary reasons every game costs one life and users should only be able to start a new game, if said life counter is >=1.To clear things up, i submitted a picture of the life counter of Popcap's facebook game "Zuma Blitz":
I can think of a few ways to do this, but i don't know which is the best/easiest approach.Would it be best to:Make it in AS3 with server communication via php?Or do it in JavaScript and communicate the count back to AS3?Another maybe related question is, how do i tell my database that the data from the life counter should be stored when the game is closed (for example by closing the browser).Can i do this from Flash or do i have to apply a html/JavaScript method?
View 1 Replies
Dec 8, 2011
I have been requested to make a port of an iOS game for Facebook.The game itself is fairly simple, it is a puzzle game using a 2d array for a grid with XML passed from a server for loading objects onto the the grid, to create levels.The game will ask questions at stages which will be passed to my server and stored for research purposes.Some questions for those with experience.What front-end options do I have with Facebook? I have looked into both Flash and HTML5/js both of which i have little to no experience in (I'm experienced in Java/C#/Ruby + Rails).Javascript seems like a nightmare from what I have read, even looking into javascript game engines, but at least it is free. My backend will most likely be rails for handling server logic.Summary(because I ramble too much)
-Is javascript for programming games really a problem for simple games on Facebook?
-Are js game engines worth using? Does anyone have any experience with them?
-Would prevention of cheating be possible with a js/rails game, do server side checks work?
-Are there any alternatives for a front end for someone with C#/Java/Ruby background?I've never seen any Unity or Java apps on Facebook(I don't use it much) and I don't know if the licensing will be an issue for this research project.
View 1 Replies
Jun 1, 2009
I'm trying to determine the practical difference between using the com.facebook.session.WebSession and com.facebook.session.JSSession. The documentation ([URL]) has more around WebSession - but the example I have which is closest to what solution I'm trying to implement uses JSSession and it looks like I could avoid all of the JavaScript pass-through & ExternalInterface calls I'm making. It appears that the benefit of using this new ActionScript Facebook API is to avoid having to make all of the Facebook calls via JavaScript.
View 5 Replies
Jan 13, 2012
i need to connect to have a button on my website that connects to facebook (if not already logged in) and posts to the users wall.I've only done this from within an iFrame - do i still need AppId etc etc?
View 1 Replies
Apr 4, 2012
I have a facebook application where the user choose 4 of his friends and then it creates a video (swf) with the pictures of your friends in it (loaded via xml). So I need to share this video on the user timeline. Everything works fine but the video is not embedded in the post on his timeline, there is only a post with the link to the page in it.The weird thing is, if I post the url directly on my timeline, the video is embedded, but not if the same link is posted via the application.here is my code called by the share button in js :
function postToFeed() {
var obj = {
method: 'feed',[code].........
View 1 Replies
Dec 6, 2011
I've recently used the 'Static HTML' application to add autoplaying flash content to a Facebook Page.Nothing too fancy, no sound, and only a few secs long. Now, Facebook say:-"Apps on Pages must not host media that plays automatically without a user's interaction."
What do they mean by 'Media' exactly? I can understand a ban on autoplaying audio content but does the ban extend to something as harmless as an animated GIF? Or more to the point, does an autoplaying .swf file fall under this?
Lastly, what course of action would Facebook take if I did violate this rule? Would they issue a warning (giving me an opportunity to remove the 'offending' item) or would they just shut down my page without any consultation?
View 2 Replies
Apr 11, 2011
I am having a scenario where I need to access a service but when accessing it, I get an HTTP authentication popup of browser. I don't the users to see this. I talked to a guy working on same thing in some other technology and he mentioned that they are using Digest Authentication. I need to know how this can be achieved in Flash.
View 1 Replies
Dec 7, 2009
I am creating a website which will contain both ASP.NET pages and a Flash applet.I want to encapsulate my business logic in a WCF service which will be exposed through two endpoints: One accesssible over the Internet through HTTP(S), for use by the Flash client, and one accessible within the data center for use by the application servers.If this does not seem like a good approach, then stop me here; otherwise, I'll move on...
The question is how to authenticate requests coming from the Flash client. Since I don't want to store the user's password in a browser cookie, don't want to send the password with every request, and don't want to have to use HTTPS after the initial login, I plan on using a token-based authentication system. I also don't want the user to have to log into the Flash client after already logging into the site itself, so I plan on using Javascript to pass the token to the Flash client when it starts.
I know WCF supports using the .NET Framework's built-in security framework (System.Security) to enforce access control, and I would like to take advantage of this.The question, then, is: How do I pass the token to the WCF service when it is called by Flash, and how do I process the token on the server? WCF has an "issued token" authentication mode, but it appears this is intended to be used in a full-blown federation scenario with a Secure Token Service and SAML tokens--a bit more complexity that I really want. It is possible to use this mode with my own "simple random-string" tokens? If so, how? Keep in mind this needs to be compatible with Flash.I could potentially pass the token in a header (either a SOAP header or an HTTP header). In this case, once I've determined which user is making the request, how do I inform the framework so that the System.Security checks will work?Is there a different approach altogether that I should consider?Anything that avoids sending passwords in every request, lets me use System.Security, and works with Flash is a possibility.
View 1 Replies
Dec 12, 2010
i have a flash application connected with a script on a remote server(X)different from the server hosting the website(Y)the application on server X needs to get some user information so i need to identify the user by what i have in the cookie
remote server X will get those informations from server Y is there any way i can get the user name or user id from the CAKEPHP cookie var?the authentication is the one found on cakephp website
[flash]----request---->[server X]----request---->[server Y]----response---->[server Y]...
View 1 Replies
Apr 2, 2012
What I would like to do is to use ASP.NET impersonation to authenticate a Flash app as a user in IIS so that the file dependencies related to the flash file ( XML config files, and PHP API calls ) are not anonymously accessible when users try to access them directly through the URL. So, instead of displaying the contents of an XML config file, it should tell the unauthenticated user they do not have permission to view the file.
Is this possible? Right now I'm looking into request headers and the settings in IIS for authentication.
So I found out how to use Basic Authentication through help posted here. The problem I'm running into is that even though the flash app sends the appropriate request. Which is handled fine in FF, Chrome, and Safari. It still displays the login pop-up box for Opera and IE. Does anyone know why IE and Opera behave differently with Basic Authentication?
View 1 Replies
Apr 24, 2005
it there any way to create an advanced password authentication in flash ? I saw the tutorial here :[URL] but I want to take it to the next level an create a more advanced authentication that will draw the passwords from a database or something external ( asp, php ). what is the most secure way to do it ?
View 5 Replies
Mar 13, 2011
I have literally spent HOURS trying to solve this mystery... but simply can't seem to get hold of it.
I am using the same code lines (literally!) as the example here (official adobe tutorial) and I get different result.
[Code]...
Everything works fine, i.e. everything till it is time to fire the loggedin event. I get asked to log in and all permissions are asked correctly. After I log myself in to facebook, the loggedin event doesn't fire. Is there any way of solving this problem??
View 1 Replies
Dec 2, 2009
I have a site that has the main path under password protection. I also have a subfolder that have a separate (htaccess/htpasswd) password protection. For some reason, when I access the subfolder, I'm asked to put in my id/password twice. All of the files that are referenced are under the subfolder.
What should I be doing to troubleshoot this? I've tried this on different browsers and it's the same behavior. There is one main html page with a .swf (the only thing on the page)...it loads other assets but they are within the same subfolder.
View 1 Replies
Sep 24, 2009
I am using a Flex widget for my facebook application. How can I get the current user's facebook ID?
View 1 Replies
Mar 31, 2010
I'm running into an issue with Uploadify. I have put Uploadify into my app and all works fine in dev (using the VS web server). All worked fine and checked until I deployed the app into my test environment which uses Integrated Windows Authentication. When I actually go to upload the file, the browser brings up a login prompt. At this point, even if you type in the correct username and password, the request seems not to complete and even if you tell the browser to remember the password it still brings up the login prompt.
When this started to occur, I decided to spin up Fiddler and see what was going on. But guess what, when ever Fiddler is running the issue doesn't occur. Unfortunately I can't make running Fiddler a reuqierment for running the app. I know there are some issues with Uploadify/flash when using forms authentication but I didn't think they carried across to Integrated Windows Authentication.
View 2 Replies
Sep 24, 2009
I can't find in the Adobe Facebook API how to log the user out of Facebook. The FacebookSessionUtil (and the related sessions and Facebook classes) all have a .logout() function, which will invalidate the user's current *session* within the swf, but it doesn't log the user out of Facebook.
What am I missing here? How are you supposed to log the user out of Facebook with this API? Since it's part of the TOS for Facebook Connect apps, you'd think this would be available in the API somewhere.
View 0 Replies
Feb 16, 2011
Authentication is performed with Basic auth over SSL (although the password inside the basic auth is SHA-2'ed). The issue is that using basic authentication for the Flash client is causing the standard browser log-in box to appear because of "WWW-Authentication: Basic" in the header. Flash is unable to bypass this by manually setting the Authorization header prior to the request.Other clients need to be able to authenticate via the existing mechanisms, so rewriting the authentication logic would not be ideal.
I have the idea that the authorization headers sent to and received from flash client could be dynamically rewritten to use another name for Basic auth which would cause the browser not to understand the auth mechanism and not present the dialog box. Authentication headers to and from Tomcat could be rewritten from "WWW-Authenticate: Basic" to "WWW-Authenticate: PretendBasic" but ideally the built in container security could still handle the basic auth after the rewrite.
I wrote a filter to rewrite inbound headers as "WWW-Authenticate: PretendBasic" as "WWW-Authenticate: Basic" hoping the next filter chain would be auth and the request would be handled as normal. Unfortunately the Servlet specification states that a filter cannot be inserted prior to authentication. I think the only possibility of this working is to create a stackable JAAS authentication module that would first perform a header rewrite on requests if coming from the Flash client, and then pass authentication through to the existing container managed security systems.
View 2 Replies
