@dan Thank you for the additional information. It definitely would allow for additional security. I will file an issue shorlty.
J
Posts made by jojo.serquina
-
RE: Facebook and appsecret_proofposted in General Discussion
-
Facebook and appsecret_proofposted in General Discussion
I was searching the forum to see if there's anyone having the same issue we have with Facebook as IP with "Require App Secret" turned on. Basically, when we call /api/identity-provider/login and we provide the accesstoken our application received from Facebook authentication, FusionAuth does not send the appsecret_proof with the request, therefore the request fails.
Any workarounds? (other than turning the setting off)
Thanks!
Jojo