<div dir="ltr">As a heads up.. this could be caused by the change I made that swapped auth_token auth and fb_sig auth.<br><br>Dave<br><br><br><div class="gmail_quote">On Fri, Aug 1, 2008 at 10:20 AM, Mike Mangino <span dir="ltr"><<a href="mailto:mmangino@elevatedrails.com">mmangino@elevatedrails.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">What kind of application is this? Facebook should always send the fb_sig parameters, right? Is this an iframe application?<br>
<font color="#888888">
<br>
Mike</font><div><div></div><div class="Wj3C7c"><br>
<br>
On Aug 1, 2008, at 12:15 PM, William Thomas wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I have been digging a bit more and I think that I know why this is happening. Since I am only asking Facebooker to authenticate my current session with Facebook, I am not getting the expected fb_sig_* parameters from my callback URL. Instead I only get auth_token and therefore the verify_signature method fails.<br>
<br>
Apparently Facebooker expects ensure_application_is_installed_by_facebook_user before anything happens, and the callback from that provides fb_sig_* stuff.<br>
<br>
I believe I have 3 options:<br>
1) Continue without the signature verification<br>
2) Create a canvas page in my rails app to handle this and leave it blank or make it link back to my site.<br>
3) Use fb connect - where is this code available?<br>
<br>
Thoughts?<br>
<br>
<br>
----- Original Message ----<br>
From: Mike Mangino <<a href="mailto:mmangino@elevatedrails.com" target="_blank">mmangino@elevatedrails.com</a>><br>
To: William Thomas <<a href="mailto:wthomas989@yahoo.com" target="_blank">wthomas989@yahoo.com</a>><br>
Cc: <a href="mailto:facebooker-talk@rubyforge.org" target="_blank">facebooker-talk@rubyforge.org</a><br>
Sent: Friday, August 1, 2008 8:56:46 AM<br>
Subject: Re: [Facebooker-talk] Facebooker::Session::IncorrectSignature exception when adding application<br>
<br>
This method makes sure requests are actually coming from Facebook.<br>
<br>
Without it, anybody could send requests to your application pretending<br>
to be from any user.<br>
<br>
Mike<br>
<br>
On Jul 31, 2008, at 11:27 PM, William Thomas wrote:<br>
<br>
> I am still having troubles with this exception. I ended up<br>
> commenting out the piece of code that throws the exception and<br>
> things work just fine after that...<br>
><br>
> I have<br>
> before_filter :ensure_authenticated_to_facebook, :only =><br>
> [ :edit_facebook, :sync_facebook_friends]<br>
><br>
> ...before rails even gets to my edit_facebook action the exception<br>
> is thrown.<br>
><br>
> What is the intention of the verify_signature method? It does not<br>
> make sense to me outright<br>
><br>
> ----- Original Message ----<br>
> From: Xue Wei li <<a href="mailto:xu3w31l1@gmail.com" target="_blank">xu3w31l1@gmail.com</a>><br>
> To: <a href="mailto:facebooker-talk@rubyforge.org" target="_blank">facebooker-talk@rubyforge.org</a><br>
> Sent: Thursday, July 24, 2008 1:11:16 PM<br>
> Subject: Re: [Facebooker-talk]<br>
> Facebooker::Session::IncorrectSignature exception when adding<br>
> application<br>
><br>
> Thanks Richard - this is a great help =)<br>
><br>
> On Wed, Jul 23, 2008 at 9:10 AM, Richard Jordan <<a href="mailto:jordanr@cs.washington.edu" target="_blank">jordanr@cs.washington.edu</a><br>
> > wrote:<br>
> it was the 1st thing I read... but in my case I need to see the whole<br>
> picture (a zipped sample app that would help) - snippets only go so<br>
> far<br>
><br>
> I put my first app on RubyForge. It's pretty bloated, a stupid<br>
> idea, and very poorly done, but it works (or at least did at one<br>
> point). If you're desperate do a,<br>
> svn checkout svn://<a href="http://rubyforge.org/var/svn/couple-rater" target="_blank">rubyforge.org/var/svn/couple-rater</a><br>
> Look at trunk/app/controller/application.rb. I put all the install/<br>
> uninstall code in my base controller.<br>
><br>
><br>
><br>
><br>
><br>
> On Tue, 22 Jul 2008, William Thomas wrote:<br>
><br>
> I'm using :ensure_authenticated_to_facebook since I don't have an<br>
> application but only want access to the data.<br>
><br>
><br>
><br>
> ----- Original Message ----<br>
> From: Xue Wei li <<a href="mailto:xu3w31l1@gmail.com" target="_blank">xu3w31l1@gmail.com</a>><br>
> To: <a href="mailto:facebooker-talk@rubyforge.org" target="_blank">facebooker-talk@rubyforge.org</a><br>
> Sent: Monday, July 21, 2008 10:05:17 PM<br>
> Subject: Re: [Facebooker-talk] Facebooker::Session::IncorrectSignature<br>
> exception when adding application<br>
><br>
><br>
> I was thinking that and I could be wrong but you know I looked at<br>
> example<br>
> after example and I haven't seen anyone do an :exclude for the<br>
> ensure_facebook_application_is_installed with exception for a<br>
> 'remove_app'<br>
> method. Am I wrong? What if I wanted to access show facebook data on<br>
> the<br>
> first page?<br>
><br>
> from Dav Yaginuma <<a href="mailto:dav.yaginuma@gmail.com" target="_blank">dav.yaginuma@gmail.com</a>><br>
> to Xue Wei li <<a href="mailto:xu3w31l1@gmail.com" target="_blank">xu3w31l1@gmail.com</a>><br>
> date Mon, Jul 21, 2008 at 11:21 AM<br>
> subject Re: [Facebooker-talk] Facebooker::Session::IncorrectSignature<br>
> exception when adding application<br>
> mailed-by <a href="http://gmail.com" target="_blank">gmail.com</a><br>
><br>
> hide details 11:21 AM (8 hours ago) Reply<br>
><br>
><br>
><br>
> I think I saw this, and the problem was the post-add URL defined in<br>
> the FB<br>
> app page needs to go to a controller action that skips the<br>
> ensure_facebook_application_is_installed filter.<br>
><br>
><br>
><br>
> _______________________________________________<br>
> Facebooker-talk mailing list<br>
> <a href="mailto:Facebooker-talk@rubyforge.org" target="_blank">Facebooker-talk@rubyforge.org</a><br>
> <a href="http://rubyforge.org/mailman/listinfo/facebooker-talk" target="_blank">http://rubyforge.org/mailman/listinfo/facebooker-talk</a><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Facebooker-talk mailing list<br>
> <a href="mailto:Facebooker-talk@rubyforge.org" target="_blank">Facebooker-talk@rubyforge.org</a><br>
> <a href="http://rubyforge.org/mailman/listinfo/facebooker-talk" target="_blank">http://rubyforge.org/mailman/listinfo/facebooker-talk</a><br>
<br>
--<br>
Mike Mangino<br>
<a href="http://www.elevatedrails.com" target="_blank">http://www.elevatedrails.com</a><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Facebooker-talk mailing list<br>
<a href="mailto:Facebooker-talk@rubyforge.org" target="_blank">Facebooker-talk@rubyforge.org</a><br>
<a href="http://rubyforge.org/mailman/listinfo/facebooker-talk" target="_blank">http://rubyforge.org/mailman/listinfo/facebooker-talk</a><br>
</blockquote>
<br>
--<br>
Mike Mangino<br>
<a href="http://www.elevatedrails.com" target="_blank">http://www.elevatedrails.com</a><br>
<br>
<br>
<br>
_______________________________________________<br>
Facebooker-talk mailing list<br>
<a href="mailto:Facebooker-talk@rubyforge.org" target="_blank">Facebooker-talk@rubyforge.org</a><br>
<a href="http://rubyforge.org/mailman/listinfo/facebooker-talk" target="_blank">http://rubyforge.org/mailman/listinfo/facebooker-talk</a><br>
</div></div></blockquote></div><br></div>