Using OAuth token from Facebook Login as a password2019 Community Moderator ElectionSecure hash and salt for PHP passwordsHow do you use bcrypt for hashing passwords in PHP?Is there a way to skip password typing when using https:// on GitHub?Facebook access token server-side validation for iPhone appGit push requires username and passwordWhy is char[] preferred over String for passwords?Rest API to validate external OAuth 2.0 access tokenBest practice for REST token-based authentication with JAX-RS and JerseyLogin with password and facebookBest practices for server-side handling of JWT tokens

Virginia employer terminated employee and wants signing bonus returned

Is "conspicuously missing" or "conspicuously" the subject of this sentence?

Should I tell my boss the work he did was worthless

Does a warlock using the Darkness/Devil's Sight combo still have advantage on ranged attacks against a target outside the Darkness?

Is it "Vierergruppe" or "Viergruppe", or is there a distinction?

What problems would a superhuman have whose skin is constantly hot?

Should I take out a loan for a friend to invest on my behalf?

Was Luke Skywalker the leader of the Rebel forces on Hoth?

Bash script should only kill those instances of another script's that it has launched

Intuition behind counterexample of Euler's sum of powers conjecture

Why doesn't this Google Translate ad use the word "Translation" instead of "Translate"?

Find longest word in a string: are any of these algorithms good?

How to draw cubes in a 3 dimensional plane

Why does liquid water form when we exhale on a mirror?

Are all players supposed to be able to see each others' character sheets?

What are actual Tesla M60 models used by AWS?

'The literal of type int is out of range' con número enteros pequeños (2 dígitos)

Reverse string, can I make it faster?

How to detect if C code (which needs 'extern C') is compiled in C++

Conservation of Mass and Energy

They call me Inspector Morse

Can you reject a postdoc offer after the PI has paid a large sum for flights/accommodation for your visit?

In the quantum hamiltonian, why does kinetic energy turn into an operator while potential doesn't?

How to write ı (i without dot) character in pgf-pie



Using OAuth token from Facebook Login as a password



2019 Community Moderator ElectionSecure hash and salt for PHP passwordsHow do you use bcrypt for hashing passwords in PHP?Is there a way to skip password typing when using https:// on GitHub?Facebook access token server-side validation for iPhone appGit push requires username and passwordWhy is char[] preferred over String for passwords?Rest API to validate external OAuth 2.0 access tokenBest practice for REST token-based authentication with JAX-RS and JerseyLogin with password and facebookBest practices for server-side handling of JWT tokens










0















How do I properly replace username/password authentication server-side, and instead authenticate a user using an OAuth token (From Facebook login)? I'm new to OAuth, and usually use password based systems, so help is kindly appreciated.



The plan is this:
1) User goes on my site and clicks "Login with Facebook", logs in
2) My site would then get the OAuth token + user email from FB, and send it to my server, which would make an account (Username= user's FB email, password= OAuth token), and the email/ token would also save to localStorage for the user
3) When the user returns to the site, it would try to login to my server with the saved localStorage email (username) and token (password).



How do I validate that the token is valid from FB server-side upon login (to prove that the user controls that email)? Also, is it a good idea to use the first gotten token as a password, or can the token change on later logins, eg from another browser? If it changes, I would need to validate the token on every login, right?



Thanks for any advice, STAN










share|improve this question




























    0















    How do I properly replace username/password authentication server-side, and instead authenticate a user using an OAuth token (From Facebook login)? I'm new to OAuth, and usually use password based systems, so help is kindly appreciated.



    The plan is this:
    1) User goes on my site and clicks "Login with Facebook", logs in
    2) My site would then get the OAuth token + user email from FB, and send it to my server, which would make an account (Username= user's FB email, password= OAuth token), and the email/ token would also save to localStorage for the user
    3) When the user returns to the site, it would try to login to my server with the saved localStorage email (username) and token (password).



    How do I validate that the token is valid from FB server-side upon login (to prove that the user controls that email)? Also, is it a good idea to use the first gotten token as a password, or can the token change on later logins, eg from another browser? If it changes, I would need to validate the token on every login, right?



    Thanks for any advice, STAN










    share|improve this question


























      0












      0








      0








      How do I properly replace username/password authentication server-side, and instead authenticate a user using an OAuth token (From Facebook login)? I'm new to OAuth, and usually use password based systems, so help is kindly appreciated.



      The plan is this:
      1) User goes on my site and clicks "Login with Facebook", logs in
      2) My site would then get the OAuth token + user email from FB, and send it to my server, which would make an account (Username= user's FB email, password= OAuth token), and the email/ token would also save to localStorage for the user
      3) When the user returns to the site, it would try to login to my server with the saved localStorage email (username) and token (password).



      How do I validate that the token is valid from FB server-side upon login (to prove that the user controls that email)? Also, is it a good idea to use the first gotten token as a password, or can the token change on later logins, eg from another browser? If it changes, I would need to validate the token on every login, right?



      Thanks for any advice, STAN










      share|improve this question
















      How do I properly replace username/password authentication server-side, and instead authenticate a user using an OAuth token (From Facebook login)? I'm new to OAuth, and usually use password based systems, so help is kindly appreciated.



      The plan is this:
      1) User goes on my site and clicks "Login with Facebook", logs in
      2) My site would then get the OAuth token + user email from FB, and send it to my server, which would make an account (Username= user's FB email, password= OAuth token), and the email/ token would also save to localStorage for the user
      3) When the user returns to the site, it would try to login to my server with the saved localStorage email (username) and token (password).



      How do I validate that the token is valid from FB server-side upon login (to prove that the user controls that email)? Also, is it a good idea to use the first gotten token as a password, or can the token change on later logins, eg from another browser? If it changes, I would need to validate the token on every login, right?



      Thanks for any advice, STAN







      authentication login oauth-2.0 passwords facebook-login






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Mar 7 at 19:30







      Stan Tatarnykov

















      asked Mar 7 at 6:45









      Stan TatarnykovStan Tatarnykov

      428711




      428711






















          0






          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function ()
          StackExchange.using("externalEditor", function ()
          StackExchange.using("snippets", function ()
          StackExchange.snippets.init();
          );
          );
          , "code-snippets");

          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "1"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













          draft saved

          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55037607%2fusing-oauth-token-from-facebook-login-as-a-password%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















          draft saved

          draft discarded
















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid


          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.

          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55037607%2fusing-oauth-token-from-facebook-login-as-a-password%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          How to get text form Clipboard with JavaScript in Firefox 56?How to validate an email address in JavaScript?How do JavaScript closures work?How do I remove a property from a JavaScript object?How do you get a timestamp in JavaScript?How do I copy to the clipboard in JavaScript?How do I include a JavaScript file in another JavaScript file?Get the current URL with JavaScript?How to replace all occurrences of a string in JavaScriptHow to check whether a string contains a substring in JavaScript?How do I remove a particular element from an array in JavaScript?

          Can't initialize raids on a new ASUS Prime B360M-A motherboard2019 Community Moderator ElectionSimilar to RAID config yet more like mirroring solution?Can't get motherboard serial numberWhy does the BIOS entry point start with a WBINVD instruction?UEFI performance Asus Maximus V Extreme

          Identity Server 4 is not redirecting to Angular app after login2019 Community Moderator ElectionIdentity Server 4 and dockerIdentityserver implicit flow unauthorized_clientIdentityServer Hybrid Flow - Access Token is null after user successful loginIdentity Server to MVC client : Page Redirect After loginLogin with Steam OpenId(oidc-client-js)Identity Server 4+.NET Core 2.0 + IdentityIdentityServer4 post-login redirect not working in Edge browserCall to IdentityServer4 generates System.NullReferenceException: Object reference not set to an instance of an objectIdentityServer4 without HTTPS not workingHow to get Authorization code from identity server without login form