× Joomla Facebook Connect support forum

Topic-icon Set domain but rest of the url automated

Active Subscriptions:

None
15 years 4 weeks ago #9996 by rdbean
Hi Alex,

Thank you for thinking of me. Yes I had seen that post and have already made clients aware that they'll need one.

I also use FB Tab Manager for wordpress that makes individual pages (not as complex as what I'm doing with this) and I can chuck all of those on one domain since they don't have to be related.

For clients who will want a richer experience, most of them have webshops so already have SSL's installed.

It did get me wondering though, many hosts provide a shared SSL free for use so I'll have to do some messing around with that. Since much of the URL Changes I'll have to write another rule in the metatemplate feature. Hoping that's all there is to it.

Thanks again and I look forward to seeing what you guys come up with!

Cheers,

Rich
The topic has been locked.
Support Specialist
15 years 4 weeks ago #10002 by alzander
Yeah, we agree it's not a deal-breaker... lots of people commenting in that FB post seemed outraged by it. Just thought we'd give you the heads up, because we certainly don't expect all of our users to be keeping an eye on the FB developer blog :)

Will definitely keep you posted when we start working on some of the features for this. We're mainly planning to have a template switcher built in that will work when Facebook requests a page (so you don't need a separate domain), some other easy integration stuff, and likely a bland default template. Once we start working on it, I'm sure things will change, but that's the quick plan. Will definitely be in touch with you at some point to test and/or get feedback.
The topic has been locked.
Active Subscriptions:

None
15 years 4 weeks ago #10031 by rdbean
Hey Alex,

So here's a question for you:

Since Apps are now going to have to have an SSL, how is this going to affect JFBC or JS or CB or anyone else using an automated way to add comments, likes etc, since you need to create an application.

Or is this going to be taken care of by this statement: July 1: Updates to the PHP and JS SDKs available that use OAuth 2.0 and have new cookie format (without access token).

Cheers,

Rich
The topic has been locked.
Support Specialist
15 years 4 weeks ago #10034 by alzander
The SSL thing shouldn't affect anything with Facebook Connect functionality when using it on a site, to my knowledge. The SSL requirement is required for Canvas apps, which are displayed on Facebook.com through an iFrame. This is simply to prevent 'sniffing' of user data when at a coffee shop or other open places. Facebook Connect (at least how JFBConnect does it), is already secure because:
1) The login pop-up from Facebook is already over SSL
2) They assign a cookie to the user which
3) JFBConnect verifies over an SSL connection from the site's server, not from the user's browser. The server just has to be able to make SSL requests, it does not need an SSL cert of it's own.

Finally, yes, there will be some changes to JFBConnect required to use the new OAuth method, which is more secure than the current OAuth method we've implemented right now. This has some extra protection for securing, and verifying, the cookie in step 2 above.

So.. in general, sites that use JFBConnect/Facebook Connect will not need an SSL cert unless they want to display their site on a Facebook.com page.

Keep the questions coming. We're always going over this stuff too to make sure we understand the changes, since if we don't implement something right, there's a lot of unhappy users. If you see anything you think we should know about it, always ask or let us know!
The topic has been locked.