Comments (5)
The login process is actually logged in the user but not the app. Other people may know your app id, but they can not do anything to your app. they can not change your setting or anything.
from facebook-ios-sdk.
Yeah I understand that the user gets logged in securely. My problem is that what prevents another developer from using my app id to access facebook?
For example, another developer could get my app id from the url, put it in their iPhone app, and use that to publish things to a user's stream that contained questionable content or foul language causing that user to report MY app. Since it is my app id, would I not be the one held responsible?
How do I keep that from happening if the only way for my app to identify itself with the api is a public piece of intormation?
from facebook-ios-sdk.
This is a very good point. But remember no matter we use app_id or api_key or app_secret, once it is shipped with the app, there is nothing can be secret. The user can always get this information by crack your app. So try to keep a secret that is shipped with client app is not really useful. Using the SDK, the stream publish is through our facebook dialog, when the app publish something to user's stream, the user would always be able to preview the content. Moreover, you are the admin of the app, you will always be the first contact if something happen.
from facebook-ios-sdk.
I disagree with this, yujuan. What if the user has given the app unprompted publish permissions? There would be no popup then, would there?
This seems to be a terrible security flaw. All a programmer has to do is know my Application ID and they can assume my application's identity. Yikes!
from facebook-ios-sdk.
That is somewhat true. I am able to call [facebook dialog:@"publish_stream" attachement:attachement delegate:self] without having given publish permission. All a user has to do is log in and then the post to wall dialog comes up and they hit publish and it's there on the wall.
from facebook-ios-sdk.
Related Issues (20)
- Facebook Login iOS SDK Authentication Token Has No Signature HOT 4
- App crashes when FacebookLogin is linked to non application target
- I cant find FBSDKLoginManager class in login kit. HOT 3
- "GraphAPI, iOS" via Limited Login has inconsistent behavior and inconsistent documentation
- @jjiang10, please take a look at https://github.com/facebook/facebook-ios-sdk/issues/2152 HOT 4
- GraphRequest `/me` fails on v17+
- Facebook Login UI Issue HOT 5
- Will the limited login warning still display after implementing limited login? HOT 4
- (Reopen) FBSDKLog: starting with Graph API v2.4, GET requests for /{appId}/model_asset should contain an explicit "fields" parameter
- its looks like this app isn't available,Facebook login not working for non administrative/testers users, mobile app react native HOT 27
- WARNING: Don't upgrade to FBSDK v17 without supporting Limited Login (the Changelog is misleading) HOT 8
- Login works in limited login only and no way to switch to use 'classic' mode with access to graph api HOT 2
- Some users receiving a link broken message when proceeding with limited login HOT 3
- Facebook SDK 17.0.0 "Instant Games" Application Type cannot get `token_for_business`
- Facebook business login in flutter HOT 1
- Unable to open the game using a scheme URL in Messenger
- Facebook Events doesn't work on Flutter App
- Event Parameters Blocked on Stock SDK Install
- {com.facebook.sdk:FBSDKErrorArgumentNameKey=videoURL, com.facebook.sdk:FBSDKErrorDeveloperMessageKey=Must refer to an asset file., com.facebook.sdk:FBSDKErrorArgumentValueKey=/var/mobile/Media/DCIM/100APPLE/IMG_0201.MOV}
- Đăng nhập Facebook không hoạt động với IOS
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from facebook-ios-sdk.