Facebook 登录消息:“URL 被阻止:此重定向失败，因为重定向 URI 未在应用程序的客户端 OAuth 设置中列入白名单." [英] Facebook login message: "URL Blocked: This redirect failed because the redirect URI is not whitelisted in the app’s Client OAuth Settings."

问题描述

重要通知:

如果您注册参加测试，请转到您的个人资料设置并在您的兴趣添加删除个人资料.

尝试使用 Facebook 登录我的

应用密钥和秘密是正确的.我正在使用 Meteor 及其帐户包.

解决方案

您网站上的 Facebook 登录按钮链接到:

https://www.facebook.com/v2.2/dialog/oauth?client_id=1500708243571026&redirect_uri=http://openstrategynetwork.com/_oauth/facebook&display=popup&scope=email&state=eyJsb2dpblN0eWxlIjoicG9wdXAiLCJjcmVkZW50aWFsVG9rZW4iOiIwSXhEU05XamJjU0VaQWdqcmF6SXdOUWruRFozXzc0X19lbVhGWUJTZGNYZ3pXpX0xpX0xpXiOiIwSXhEU05XamJjU0VaQWdqcmF6SXdOUWRuRFozXzc0Xp

注意:redirect_uri=http://openstrategynetwork.com/_oauth/facebook

如果您改为将链接更改为:

redirect_uri=http://openstrategynetwork.com/_oauth/facebook?close

它应该可以工作.或者，您可以将 Facebook 链接更改为 http://openstrategynetwork.com/_oauth/facebook

您还可以将 http://localhost/_oauth/facebook 添加到有效的重定向 URI.

Facebook 要求您将重定向 URI 列入白名单，否则人们可能会使用 Facebook 登录您的服务，然后将他们的访问令牌发送到攻击者的服务器！你不希望这种情况发生;]

Important notice:

If you register for testing, go to your profile settings and to your interests add delete profile.

Trying to login with Facebook to my website:

I get the following error:

URL Blocked: This redirect failed because the redirect URI is not whitelisted in the app’s Client OAuth Settings. Make sure Client and Web OAuth Login are on and add all your app domains as Valid OAuth Redirect URIs.

My settings (Basics) in Facebook are:

• App Domains: openstrategynetwork.com
• Site URL for website: http://openstrategynetwork.com/

In the advanced tab, Valid OAuth redirect URIs is set to:

http://openstrategynetwork.com/_oauth/facebook?close

App is public.

More settings (Advanced) here:

App key and secret are correct. I'm using Meteor and its accounts packages.

解决方案

The login with Facebook button on your site is linking to:

https://www.facebook.com/v2.2/dialog/oauth?client_id=1500708243571026&redirect_uri=http://openstrategynetwork.com/_oauth/facebook&display=popup&scope=email&state=eyJsb2dpblN0eWxlIjoicG9wdXAiLCJjcmVkZW50aWFsVG9rZW4iOiIwSXhEU05XamJjU0VaQWdqcmF6SXdOUWRuRFozXzc0X19lbVhGWUJTZGNYIiwiaXNDb3Jkb3ZhIjpmYWxzZX0=

Notice: redirect_uri=http://openstrategynetwork.com/_oauth/facebook

If you instead change the link to:

redirect_uri=http://openstrategynetwork.com/_oauth/facebook?close

It should work. Or, you can change the Facebook link to http://openstrategynetwork.com/_oauth/facebook

You can also add http://localhost/_oauth/facebook to the valid redirect URIs.

Facebook requires that you whitelist redirect URIs, since otherwise people could login with Facebook for your service, and then send their access token to an attacker's server! And you don't want that to happen ;]

这篇关于Facebook 登录消息:“URL 被阻止:此重定向失败，因为重定向 URI 未在应用程序的客户端 OAuth 设置中列入白名单."的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！