CODEWITHSUNDEEP
facebookssl
Keith Lantz
Keith Lantz

Reputation: 113

Facebook Secure Canvas URL Requirement and Legacy Applications

With Facebook requiring a secure URL for Canvas applications on October 1st, what will happen to legacy applications that have no URL specified for the Secure Canvas URL? Will they continue to load over HTTP and fail over HTTPS?

Suppose an application has URLs specified for the Canvas, Page Tab, and Secure Page Tab, but no URL specified for the Secure Canvas.. will these applications continue to function, or will they be blocked entirely because they lack a secure URL for the Canvas?

Upvotes: 5

Views: 11684

Answers (7)

UnTechie
UnTechie

Reputation: 365

I have come up with an interesting hack for this problem.

You can create a HTML file that is accessible over HTTPS that just redirects to your webpage. For example, you can use dropbox. Since Facebook loads your secure canvas URL page in an iframe, your code needs to redirect the top page. Something like this.

<html>
  <head>
    <script>
    function onLoad() {
      window.top.location.href=’<your website>’;
    }
    </script>
  </head>
  <body onload=”onLoad()”>
    <p>Please wait while you are being redirected to <your website name>…</p>
  </body>
</html>

And provide this link as the secure canvas URL. I blogged about this in more detail - http://blog.almabase.com/post/84579042935/interesting-hack-for-facebook-secure-canvas-url

Upvotes: 0

CHarris
CHarris

Reputation: 2793

Just researching this issue; I don't have an ssl cert and when I try to access my app as a Facebook app I get:

enter image description here

I think no ssl is the cause so looks like i need to buy one :(

Upvotes: 0

Hacker
Hacker

Reputation: 51

use simple bit.ly address in your canvas url.... it works

Upvotes: 5

Rehan
Rehan

Reputation: 26

Well the applications without secure connection (https) are still working. Today is October 05 and I'm not seeing any sort of change in my apps. They are working nicely and people have access.

Upvotes: 1

TESTERTHETHUMPER
TESTERTHETHUMPER

Reputation: 176

Applications will enter a new 'disabled' mode, similar to sandbox, until Secure Callback URL is set.

Upvotes: 1

Lucy
Lucy

Reputation: 11

ye unfortunately the entire app will be blocked, well that's what im reading around the web anyways. AFAIK you need your secure URL to have some location URL for it to function.

And now i see Facebook has added a message for users to enable secure browsing when u login. so even more so no to get a secure link than ever.

If you are struggling try out http://social-server.com. Instead of buying a SSL certificate it does the same thing for free and its instant!

Upvotes: 1

Contristo
Contristo

Reputation: 335

Come October 1st as the dev pages states on facebook you will be required to have a secure url. I just picked up a cheap SSL cert from godaddy for like 16 bucks for a year. i do not know if they still have the deal going on, but it definitively worth checking. Once the cert is installed on your server, you do not need to migrate anything, the whole process took like 2 hours most of which was waiting on godaddy.

Upvotes: 0

Related Questions