lundi 6 avril 2015

Android Facebook login and server side authenticaiton

I am having trouble wrapping my head around the following:



  • Android app with a Facebook login

  • NodeJS (Hapi.js) server backend


In the past I was using a simple username password system that made it very easy to create a server side session and authenticate server requests (for example: get all users that are within 50 km of me). I removed that system and chose for a Facebook login in the android app because it will help decrease some of the load (for example: we don't need to store our own images...).


The problem is that I am not sure how to handle server side authentication. All GET's, POST's,... can only be done by users that are also logging in on my Android app using the Facebook integration.


I found the following topics already on Stackoverflow:



I just want an updated opinion on the matter, is it secure enough to just send the token to my node server and make a Facebook API call using it to check for a valid authentication?


If there is a better approach please share it! Thanks in advance.


Aucun commentaire:

Enregistrer un commentaire