简体   繁体   English

Facebook安全画布URL要求和旧应用程序

[英]Facebook Secure Canvas URL Requirement and Legacy Applications

With Facebook requiring a secure URL for Canvas applications on October 1st, what will happen to legacy applications that have no URL specified for the Secure Canvas URL? 由于Facebook要求在10月1日为Canvas应用程序提供安全的URL,那么没有为Secure Canvas URL指定URL的遗留应用程序会发生什么? Will they continue to load over HTTP and fail over HTTPS? 他们会继续加载HTTP并通过HTTPS进行故障转移吗?

Suppose an application has URLs specified for the Canvas, Page Tab, and Secure Page Tab, but no URL specified for the Secure Canvas.. will these applications continue to function, or will they be blocked entirely because they lack a secure URL for the Canvas? 假设应用程序具有为Canvas,Page Tab和Secure Page Tab指定的URL,但没有为Secure Canvas指定URL。这些应用程序将继续运行,还是会被完全阻止,因为它们缺少Canvas的安全URL ?

在你的画布网址中使用简单的bit.ly地址....它的工作原理

ye unfortunately the entire app will be blocked, well that's what im reading around the web anyways. 不幸的是,整个应用程序将被阻止,这就是我正在网上阅读的东西。 AFAIK you need your secure URL to have some location URL for it to function. AFAIK您需要安全的URL才能获得一些位置URL以使其正常运行。

And now i see Facebook has added a message for users to enable secure browsing when u login. 现在我看到Facebook为用户添加了一条消息,以便在您登录时启用安全浏览。 so even more so no to get a secure link than ever. 所以没有比以往更安全的链接。

If you are struggling try out http://social-server.com . 如果你正在努力尝试http://social-server.com Instead of buying a SSL certificate it does the same thing for free and its instant! 而不是购买SSL证书,它是免费和即时的同样的事情!

在设置安全回调URL之前,应用程序将进入类似于沙箱的新“禁用”模式。

Well the applications without secure connection (https) are still working. 那么没有安全连接的应用程序(https)仍在运行。 Today is October 05 and I'm not seeing any sort of change in my apps. 今天是05年10月,我的应用程序中没有任何变化。 They are working nicely and people have access. 他们工作得很好,人们可以访问。

Just researching this issue; 只是研究这个问题; I don't have an ssl cert and when I try to access my app as a Facebook app I get: 我没有ssl证书,当我尝试访问我的应用程序作为Facebook应用程序时,我得到:

在此输入图像描述

I think no ssl is the cause so looks like i need to buy one :( 我认为没有ssl是因为看起来我需要买一个:(

I have come up with an interesting hack for this problem. 我已经想出了一个有趣的黑客来解决这个问题。

You can create a HTML file that is accessible over HTTPS that just redirects to your webpage. 您可以创建一个可通过HTTPS访问的HTML文件,该文件只是重定向到您的网页。 For example, you can use dropbox. 例如,您可以使用dropbox。 Since Facebook loads your secure canvas URL page in an iframe, your code needs to redirect the top page. 由于Facebook在iframe中加载了您的安全画布URL页面,因此您的代码需要重定向首页。 Something like this. 像这样的东西。

<html>
  <head>
    <script>
    function onLoad() {
      window.top.location.href=’<your website>’;
    }
    </script>
  </head>
  <body onload=”onLoad()”>
    <p>Please wait while you are being redirected to <your website name>…</p>
  </body>
</html>

And provide this link as the secure canvas URL. 并提供此链接作为安全画布URL。 I blogged about this in more detail - http://blog.almabase.com/post/84579042935/interesting-hack-for-facebook-secure-canvas-url 我在博客中详细介绍了这一点 - http://blog.almabase.com/post/84579042935/interesting-hack-for-facebook-secure-canvas-url

Come October 1st as the dev pages states on facebook you will be required to have a secure url. 10月1日,因为开发页面在Facebook上显示,您将需要有一个安全网址。 I just picked up a cheap SSL cert from godaddy for like 16 bucks for a year. 我刚刚从godaddy那里拿到了一张便宜的SSL证书,价格为16美元一年。 i do not know if they still have the deal going on, but it definitively worth checking. 我不知道他们是否仍然有交易,但它绝对值得检查。 Once the cert is installed on your server, you do not need to migrate anything, the whole process took like 2 hours most of which was waiting on godaddy. 一旦证书安装在您的服务器上,您就不需要迁移任何东西,整个过程耗时2个小时,其中大部分都在等待godaddy。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM