Facebook Login

Learn how to interact with Facebook Login

To enable Facebook Auth for your project, you need to set up a Facebook OAuth application and add the application credentials to your Openfort Dashboard.

Overview#

Setting up Facebook logins for your application consists of 3 parts:

Create and configure a Facebook Application on the Facebook Developers Site.
Add your Facebook keys to your Openfort Project.
Add the login code to your Openfort JS Client App.

Configuration#

Go to developers.facebook.com.
Click on Log In at the top right to log in.

Create a Facebook app

Click on My Apps at the top right.
Click Create App near the top right.
Select your app type and click Continue.
Fill in your app information, then click Create App.
This should bring you to the screen: Add Products to Your App. (Alternatively you can click on Add Product in the left sidebar to get to this screen.)

Set up Facebook login for your Facebook app

From the Add Products to your App screen:

Click Setup under Facebook Login
Skip the Quickstart screen, instead, in the left sidebar, click Settings under Facebook Login
Enter your callback URI (https://api.openfort.xyz/iam/v1/oauth/callback/facebook) under Valid OAuth Redirect URIs on the Facebook Login Settings page
Enter this in the Valid OAuth Redirect URIs box
Click Save Changes at the bottom right

Be aware that you have to set the right use case permissions to enable Third party applications to read the email address. To do so:

Under Build Your App, click on Use Cases screen. From there, do the following steps:

Click the Edit button in Authentication and Account Creation on the right side. This action will lead to the other page.
public_profile is set by default, so make sure it and email have status of Ready for testing in the redirected page.
If not, click the Add button in email on right side.

Copy your Facebook app ID and secret

Click Settings / Basic in the left sidebar
Copy your App ID from the top of the Basic Settings page
Under App Secret click Show then copy your secret
Make sure all required fields are completed on this screen.

Enter your Facebook app ID and secret into your Supabase project

Signing users in#

To initiate sign in, you can use the initOAuth() method from the Openfort JavaScript library and provide a redirectTo URL which points to a callback route.

Implicit flow: that's all you need to do. The user will be taken to Google's consent screen, and finally redirected to your app with an access and refresh token pair representing their session.
Pooling flow: for example in Server-Side Auth, you need to redirect the user back to your website.

const response = await openfort.initOAuth(
  {
    provider: OAuthProvider.FACEBOOK,
    redirectTo: 'https://your-website.com',
  }
);

response

{
  "url": "redirect-url",
  "key": "key"
}

Now you can redirect the user to the initOAuth.url and when the process is done, you will be redirected to the redirectTo url with tokens https://your-website.com?access_token=...&refresh_token=... You can then use those parameters to authenticate the user:

openfort.storeCredentials({
    player: 'undefined',
    accessToken: access_token,
    refreshToken: refresh_token,
  });

Uppon successful authentication, the SDK will return a token that can be used to authenticate the user in your application.

response.json

{
  "player": {
      "id": "pla_cc9ed2b7-c5f5-4c43-8dca-c4b104ba1762",
      "object": "player",
      "createdAt": 1710976453,
      "linkedAccounts": [
          {
              "provider": "facebook",
              "disabled": false,
              "externalUserId": "2"
          }
      ]
  },
  "token": "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImNmODNlMTM1N2VlZmI4YmRmMTU0Mjg1MGQ2NmQ4MDA3ZDYyMGU0MDUwYjU3MTVkYzgzZjRhOTIxZDM2Y2U5Y2U0N2QwZDEzYzVkODVmMmIwZmY4MzE4ZDI4NzdlZWMyZjYzYjkzMWJkNDc0MTdhODFhNTM4MzI3YWY5MjdkYTNlIn0.eyJhdWQiOiJwcm9fOGY3ZTM1NTktMjhkNy00MWE2LTgxNGMtMjU0OTkzZTdkNjFkLXRlc3QiLCJleHAiOjE3MTA5ODI2MDIsImlhdCI6MTcxMDk3OTAwMiwiaXNzIjoib3BlbmZvcnQueHl6Iiwic2lkIjoiMzhhMDdmMzktMTUxOS00MjE0LWJmNmMtNzI0Zjg0ZDBiZGQwIiwic3ViIjoicGxhX2NjOWVkMmI3LWM1ZjUtNGM0My04ZGNhLWM0YjEwNGJhMTc2MiJ9.EcFtS__GwyxJu1S3tO7jMBbTCIJCpqsoNxxJrqILrKjNl2N5-SIMG2z_s2Vs8ztG6KAVy6zIp6P9GzfD7s4JiA",
  "refreshToken": "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImNmODNlMTM1N2VlZmI4YmRmMTU0Mjg1MGQ2NmQ4MDA3ZDYyMGU0MDUwYjU3MTVkYzgzZjRhOTIxZDM2Y2U5Y2U0N2QwZDEzYzVkODVmMmIwZmY4MzE4ZDI4NzdlZWMyZjYzYjkzMWJkNDc0MTdhODFhNTM4MzI3YWY5MjdkYTNlIn0.eyJzaWQiOiIzOGEwN2YzOS0xNTE5LTQyMTQtYmY2Yy03MjRmODRkMGJkZDAiLCJpYXQiOjE3MTA5NzkwMDIsImV4cCI6MTcxMzU3MTAwMn0.koNd4eoevBQQR3-z0CMGL5qVzOURZEeAgjvrHMRloLgDbScS2Qbi4W-vf2fE0fYOWUIAHnAq7cDABNwSQrEvSQ"
}

Facebook Login

Learn how to interact with Facebook Login

Overview#

Configuration#

Signing users in#

Resources#