登录后获取Facebook访问令牌

Question

I have a small Django project that supports logging in via Facebook. I'm not using any pluings (like social-auth et al). I'm using FB's Javascript sdk to do the authentication.

I'm sending the access token back to my view, however, I need the FB user id. How do I query FB for the User ID from the access token?

I was sending the FB user id at first, however, any one can tamper with the it and I had no way to know if the ID is actually authentic.

Thank you.

Answer 1

用户ID应该与访问令牌一起可用，尽管为了进行验证，您需要从签名的请求中提取它，或者使用对https://graph.facebook.com/me的api调用来检索它。使用令牌。