POST /_facebook creates a facebook-based login session and sets its cookie.
()
| 25 | |
| 26 | // POST /_facebook creates a facebook-based login session and sets its cookie. |
| 27 | func (h *handler) handleFacebookPOST() error { |
| 28 | err := h.checkLoginCORS() |
| 29 | if err != nil { |
| 30 | return err |
| 31 | } |
| 32 | var params struct { |
| 33 | AccessToken string `json:"access_token"` |
| 34 | } |
| 35 | err = h.readJSONInto(¶ms) |
| 36 | if err != nil { |
| 37 | return err |
| 38 | } |
| 39 | |
| 40 | facebookResponse, err := verifyFacebook(kFacebookOpenGraphURL, params.AccessToken) |
| 41 | if err != nil { |
| 42 | return err |
| 43 | } |
| 44 | |
| 45 | createUserIfNeeded := h.server.Config.DeprecatedConfig.Facebook.Register |
| 46 | return h.makeSessionFromNameAndEmail(facebookResponse.Id, facebookResponse.Email, createUserIfNeeded) |
| 47 | |
| 48 | } |
| 49 | |
| 50 | func verifyFacebook(fbUrl, accessToken string) (*FacebookResponse, error) { |
| 51 |
nothing calls this directly
no test coverage detected