login redirect in a way that will never complete

Can you post, or private message, the URL to your live site and to your App Canvas URL so that we can test with both?

Not sure why that would be happening, but we'll do what we can to help investigate!

Thanks,
Alex

Aaron,
Facebook will use the SSL version of your site whenever a user is logged into Facebook. There is information that they transfer to your website through the iFrame they use about the current user, and so therefore, Facebook encrypts that information. When a user is not logged in, they may or may not load the site over SSL (it varies on a few factors). That is why they ask for both a Canvas URL and a Secure Canvas URL; they want the ability to choose the right one for the situation.

With that said, when I go to the apps page you mention above, I get an error message (in Chrome) that states:

Error 501 (net::ERR_INSECURE_RESPONSE): Unknown error.

If I go to your SSL site directly yioceanside.org/, I get a security warning that the SSL certificate is not trusted by a root authority. I'm not sure where you got your SSL certificate, but you will need one that has been validated by a root authority (Comodo, Verisign, etc). You cannot use a self-signed certificate, if that's what you're trying.

I think once you get the SSL issue worked out, you should be up and running. If this doesn't help though, just let us know!

Thanks,
Alex

aaron,
Sorry for the delay. Had to do some testing on your site and some investigation on our part. First of, JFBConnect and autologin functionality should be fully compatible with your App Canvas page. There are multiple other sites that use auto-login in the Canvas view and we haven't heard of any issues recently with that feature.

The redirect loop looks to be a race issue between JFBConnect and your language extension. Basically, Facebook is trying to do some redirects and I think your language extension is as well, and they are both getting confused. Can you try a few things to see if they improve the situation?
* First, try disabling the Language switcher/detection functionality you have enabled. Do this temporarily, but if it works, that will greatly help narrow down the issue.
* If that fixes it, re-enable the language plugin you're using and then try re-ordering it both above and below the JFBCSystem plugin.

After you make each change, please clear your Joomla *and* browser cache to make sure that the change fully takes effect.

Let us know if that helps at all. If not, I'm sure we can come up with more possible causes!

Thanks,
Alex

Aaron,
Not sure what's causing it either then. When I go to your App site (not logged into Facebook) and then go to your live site in another tab, the URL changes to:The ref=fb part is from JFBConnect. That is placed on the URL *after* we have detected that the user has just come from the App Canvas page and we've successfully reverted the template back the 'normal' live site template for the user. So, at that point, JFBConnect shouldn't be doing any more redirects. However, the lang=en part of the URL indicates something is trying to change the language. That shouldn't be JFBConnect, and that's why I assumed it was a language plugin extension of some sort.

Anyways, with that said, if you can send admin credentials for the site, that'd be great. You can Private Message me by clicking the arrow under my name (<----) and hitting the mail icon.

Thanks,
Alex