vgheri

test:
	@./node_modules/.bin/mocha

.PHONY: test

vgheri

// Call facebook API to verify the token is valid
// https://graph.facebook.com/me?access_token=$token
function verifyFacebookUserAccessToken(token) {
	var deferred = Q.defer();
	var path = 'https://graph.facebook.com/me?access_token=' + token;
	request(path, function (error, response, body) {
		var data = JSON.parse(body);
		if (!error && response && response.statusCode && response.statusCode == 200) {
			var user = {
				facebookUserId: data.id,

vgheri

function authorise(req, res, next) {
  var apiAccessToken = req.body.apiAccessToken || null;
  var userId = req.params.userId || req.body.userId || null;
  if (apiAccessToken && userId) {
    SecurityToken.authorise(apiAccessToken, userId)
      .then(function(authorised) {
        if (authorised) {
          next();
        }
        else {

vgheri

public partial class Startup
{
    /// <summary>
    /// This part has been added to have an API endpoint to authenticate users that accept a Facebook access token
    /// </summary>
    static Startup()
    {
        PublicClientId = "self";

        UserManagerFactory = () => 

vgheri

[HttpPost]
[AllowAnonymous]
[Route("FacebookLogin")]
public async Task<IHttpActionResult> FacebookLogin([FromBody] string token)
{
    if (string.IsNullOrEmpty(token))
    {
        return BadRequest("Invalid OAuth access token");
    }

vgheri

private async Task<FacebookUserViewModel> VerifyFacebookAccessToken(string accessToken)
{
    FacebookUserViewModel fbUser = null;
    var path = "https://graph.facebook.com/me?access_token=" + accessToken;
    var client = new HttpClient();
    var uri = new Uri(path);     
    var response = await client.GetAsync(uri);
    if (response.IsSuccessStatusCode)
    {
        var content = await response.Content.ReadAsStringAsync();