Facebook SDK 是否需要 HTTPS? [英] Does Facebook SDK require HTTPS?

问题描述

我正在使用 Facebook SDK.我收到以下错误:

不安全登录被阻止:您无法从不安全页面获取访问令牌或登录此应用程序.尝试将页面重新加载为 https://

学习后我知道我必须在facebook登录>设置>"下将强制HTTPS"设置为否".但是我不能将 Enforce HTTPS 设置为 NO.这个问题是我的吗?或者我 facebook 限制使用 https 而不是 http?

解决方案

但我无法将强制 HTTPS 设置为否.这个问题是我的吗?

https://developers.facebook.com/docs/facebook-login/security:

<块引用>

强制使用 HTTPS.此设置需要 HTTPS 用于 OAuth 重定向和使用 JavaScript SDK 获取访问令牌的页面.截至 2018 年 3 月创建的所有新应用默认启用此设置，您应该计划在 2019 年 3 月之前迁移所有现有应用以仅使用 HTTPS 网址.

在我看来，当您现在创建新应用时，他们甚至不希望您在没有 HTTPS 的情况下启动.

<小时>

此外，Chrome 最近宣布，他们将很快将所有 HTTP 站点标记为不安全，从 68 版开始，该版本将于 2018 年 7 月发布.因此，无论如何你都必须尽快使用 HTTPS.

该行业的大玩家"目前正在推动这个重要时刻，无论我们是否愿意.

I am using facebook SDK. I am getting the following error:

Insecure Login Blocked: You can't get an access token or log in to this app from an insecure page. Try re-loading the page as https://

After studying I came to know that I have to set 'Enforce HTTPS' as NO under 'facebook login> Setting> '. But I can not set Enforce HTTPS as NO. Is this problem is from mine? OR I facebook restrict to use https instead of http?

解决方案

But I can not set Enforce HTTPS as NO. Is this problem is from mine?

https://developers.facebook.com/docs/facebook-login/security:

Enforce HTTPS. This setting requires HTTPS for OAuth Redirects and pages getting access tokens with the JavaScript SDK. All new apps created as of March 2018 have this setting on by default and you should plan to migrate any existing apps to use only HTTPS URLs by March 2019.

Sounds to me, like they don’t want you to be able to even start without HTTPS, when you are creating a new app now.

---

Plus, Chrome has recently announced that they will mark all HTTP sites as insecure soon, from version 68 on, that will be released in July 2018. So you’re gonna have to go HTTPS rather sooner than later anyway.

The "big players" of the industry are currently pushing for this big time, whether we want it or not.

这篇关于Facebook SDK 是否需要 HTTPS?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！